<!doctype html>
<!--
  trentpower.fr
  static, self-managed, privacy-first
  no analytics, no cookies, no external assets
  detached verification notes for /integrity/
-->
<html lang="en-AU" dir="ltr">
<head>
  <!-- head · 01 · foundations -->
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
  <meta name="color-scheme" content="light dark">
  <meta name="supported-color-schemes" content="light dark">
  <meta name="theme-color" content="#E9E5DC">

  <!-- head · 02 · appearance bootstrap -->
  <script>(()=>{const e=document.documentElement;e.classList.add('js');try{const m=localStorage.getItem('tp-theme');if(m==='dark'||m==='light')e.dataset.theme=m}catch(_){}})();</script>

  <!-- head · 03 · document identity -->
  <title>Verify locally · Trent Power</title>
  <meta name="description" content="Detached verification notes: signed manifest check from a temporary keyring">
  <meta name="document-edition" content="2026-05-23">
  <link rel="canonical" href="https://trentpower.fr/en-au/integrity/verify-locally/">
  <link rel="alternate" hreflang="en-AU" href="https://trentpower.fr/en-au/integrity/verify-locally/">
  <link rel="alternate" hreflang="fr" href="https://trentpower.fr/fr/integrite/verifier-localement/">
  <link rel="alternate" hreflang="x-default" href="https://trentpower.fr/">

  <!-- head · 04 · indexing and discovery -->
  <meta name="robots" content="noindex">
  <meta name="referrer" content="no-referrer">

  <!-- head · 05 · authorship and identity -->
  <meta name="author" content="Trent Power">
  <link rel="author" href="/.well-known/attribution.txt">
  <link rel="alternate" type="application/ld+json" href="/.well-known/person.json">

  <!-- head · 06 · provenance, rights and reuse -->
  <link rel="license" href="https://creativecommons.org/licenses/by-sa/4.0/">

  <!-- head · 07 · social and sharing -->
  <meta property="og:type" content="website">
  <meta property="og:site_name" content="Trent Power">
  <meta property="og:title" content="Verify locally · Trent Power">
  <meta property="og:description" content="Detached verification notes: signed manifest check from a temporary keyring">
  <meta property="og:url" content="https://trentpower.fr/en-au/integrity/verify-locally/">
  <meta property="og:image" content="https://trentpower.fr/images/og/integrity-og.png">
  <meta property="og:image:width" content="1200">
  <meta property="og:image:height" content="630">
  <meta property="og:image:type" content="image/png">
  <meta property="og:image:alt" content="Verify locally · Trent Power">
  <meta name="twitter:card" content="summary_large_image">
  <meta name="twitter:title" content="Verify locally · Trent Power">
  <meta name="twitter:description" content="Detached verification notes: signed manifest check from a temporary keyring">
  <meta name="twitter:image" content="https://trentpower.fr/images/og/integrity-og.png">
  <meta name="twitter:image:alt" content="Verify locally · Trent Power">
  <meta name="twitter:site"    content="@trentpower">
  <meta name="twitter:creator" content="@trentpower">

  <!-- head · 08 · application surface -->
  <meta name="application-name" content="Trent Power">
  <meta name="apple-mobile-web-app-title" content="Trent Power">
  <link rel="icon" href="/favicon.ico" sizes="any">
  <link rel="icon" href="/favicon.svg" type="image/svg+xml">
  <link rel="apple-touch-icon" href="/apple-touch-icon.png">
  <link rel="manifest" href="/manifest.webmanifest" type="application/manifest+json">

  <!-- head · 09 · rendering and assets -->
  <link rel="stylesheet" href="/styles.css?v=2026-05-23.d73a065e" integrity="sha384-jsLOFfd+NWjpdmWzZMcp+iz29oJdegRsgBRP+HM3Epzq72lclJkqgNDCKfSkEtEc">
  <link rel="stylesheet" href="/print.css?v=2026-05-23.d73a065e" media="print">

  <!-- head · 10 · structured data -->
  <script type="application/ld+json">
{
  "@context": "https://schema.org",
  "@type": "TechArticle",
  "@id": "https://trentpower.fr/integrity/verify-locally/#article",
  "headline": "Verify locally · Trent Power",
  "url": "https://trentpower.fr/en-au/integrity/verify-locally/",
  "description": "Detached verification notes for the signed integrity manifest",
  "inLanguage": "en-AU",
  "isPartOf": {
    "@id": "https://trentpower.fr/#website"
  },
  "author": {
    "@id": "https://trentpower.fr/#trent-power"
  },
  "publisher": {
    "@id": "https://trentpower.fr/#trent-power"
  },
  "datePublished": "2026-05-13",
  "dateModified": "2026-05-23T00:00:00+00:00"
}
  </script>
</head>
<body data-page="integrity-verify-locally" data-layout="masthead" data-surface="record" data-masthead="brand-only" data-edition="2026-05-23" data-source-sha256-short="--------">

<a href="#main" class="skip-link">Skip to content</a>

<header class="site-header" data-component="site-header">
  <div class="nav">
    <div class="nav-inner">
      <a class="nav-mark u-author" href="/en-au/" aria-label="Trent Power home"><span>Trent</span> <span>Power</span></a>
    </div>
  </div>
</header>

<main class="site" id="main" tabindex="-1" itemscope itemtype="https://schema.org/TechArticle">
  <div class="page">
    <p class="page-kicker">Verify Locally</p>
    <h1 class="page-title hero-stack"><span class="hero-line">Get to</span><span class="hero-line">the terminal!</span></h1>
    <div class="page-body">
      <p class="page-lede">Detached verification notes for the signed integrity manifest. Run the check in a
      temporary keyring so the public signing key does not enter your default keychain.</p>

      <div class="trust-code-block">
        <div class="trust-code-block-header">
          <button type="button" class="trust-code-copy verify-command-copy record-inline-action"
                  data-copy-target="integrity-verify-command"
                  data-copy-feedback="Copied">Copy command</button>
        </div>
        <pre class="trust-code" id="integrity-verify-command"><code><span class="code-var">tmpdir</span>=<span class="code-str">"$(mktemp -d)"</span>
<span class="code-cmd">export</span> <span class="code-var">GNUPGHOME</span>=<span class="code-str">"$tmpdir"</span>

<span class="code-var">ts</span>=<span class="code-cmd">$(</span>date +%s<span class="code-cmd">)</span>
<span class="code-cmd">curl</span> -fsS <span class="code-str">"https://trentpower.fr/integrity.json?ts=$ts"</span> -o integrity.json
<span class="code-cmd">curl</span> -fsS <span class="code-str">"https://trentpower.fr/integrity.json.sig?ts=$ts"</span> -o integrity.json.sig
<span class="code-cmd">curl</span> -fsS <span class="code-str">"https://trentpower.fr/.well-known/pgp-key.asc?ts=$ts"</span> | <span class="code-cmd">gpg</span> --import
<span class="code-cmd">gpg</span> --verify integrity.json.sig integrity.json

<span class="code-cmd">rm</span> -rf <span class="code-str">"$tmpdir"</span> integrity.json integrity.json.sig</code></pre>
      </div>

      <p class="integrity-page-level-note">The command imports the public key into a throw-away keyring, verifies the signed
      manifest, and removes the working files. No state is retained on the machine
      afterwards.</p>
    </div>
  </div>

</main>


<!-- body · footer -->
<footer class="site-footer" aria-label="Site footer">
  <div class="site-footer__inner">

    <!-- top stratum · identity · nav · language -->
    <div class="site-footer__top">

      <p class="site-footer__identity">
        <span class="year">&copy; <time datetime="2026">2026</time></span>
        <a class="wm" href="/en-au/" rel="home" aria-describedby="desc-home-footer"><bdi>Trent Power</bdi></a>
        <span class="visually-hidden" id="desc-home-footer">Return to the homepage</span>
      </p>

      <nav class="site-footer__nav" aria-label="Footer">
        <span>Paris, France</span>
        <span class="sep" aria-hidden="true">&middot;</span>
        <a class="site-footer__action" href="/en-au/privacy/" rel="privacy-policy" aria-describedby="desc-privacy">Privacy</a>
        <span class="visually-hidden" id="desc-privacy">Read how this site avoids analytics, cookies, profiling, tracking, and third-party assets</span>
        <span class="sep" aria-hidden="true">&middot;</span>
        <button type="button" class="site-footer__action"
                data-cite-open aria-haspopup="dialog"
                aria-describedby="desc-cite">Verify</button>
        <span class="visually-hidden" id="desc-cite">Open citation and verification details for this page</span>
      </nav>

      <ul class="site-footer__language" aria-label="Language">
        <li><a href="/en-au/integrity/verify-locally/"  aria-describedby="desc-lang-en" lang="en" aria-current="page">English</a> <span class="visually-hidden" id="desc-lang-en">Read this site in English</span></li>
        <li aria-hidden="true"><span class="sep">&middot;</span></li>
        <li><a href="/fr/integrite/verifier-localement/" aria-describedby="desc-lang-fr" lang="fr">Français</a> <span class="visually-hidden" id="desc-lang-fr">Lire ce site en français</span></li>
      </ul>

    </div>

    <hr class="site-footer__break" aria-hidden="true">

    <!-- bottom stratum · colophon · theme -->
    <div class="site-footer__bottom">

      <ul class="site-footer__colophon" id="footerImprint" aria-label="Publication integrity">
        <li class="site-footer__colophon-row">
          <a class="site-footer__colophon-link" href="/en-au/integrity/" aria-describedby="desc-integrity"><span class="site-footer__colophon-key">Edition</span> <time datetime="2026-05-23">2026-05-23</time></a>
          <span class="site-footer__colophon-sep" aria-hidden="true">·</span>
          <span class="site-footer__colophon-note" data-edition-age>Published today</span>
          <span class="visually-hidden" id="desc-integrity">Open the public integrity record, including hashes, signatures, and release verification</span>
        </li>
      </ul>

      <ul class="site-footer__theme" aria-label="Appearance">
        <li><button type="button" data-theme="light"  aria-pressed="false" aria-describedby="desc-theme-light">Light</button> <span class="visually-hidden" id="desc-theme-light">Switch to the light appearance</span></li>
        <li aria-hidden="true"><span class="sep">&middot;</span></li>
        <li><button type="button" data-theme="system" aria-pressed="true"  aria-describedby="desc-theme-auto">Auto</button> <span class="visually-hidden" id="desc-theme-auto">Match the system appearance setting</span></li>
        <li aria-hidden="true"><span class="sep">&middot;</span></li>
        <li><button type="button" data-theme="dark"   aria-pressed="false" aria-describedby="desc-theme-dark">Dark</button> <span class="visually-hidden" id="desc-theme-dark">Switch to the dark appearance</span></li>
      </ul>

    </div>

  </div>
</footer>
<!-- scripts · progressive enhancement, no telemetry -->
<script src="/js/theme.js?v=2026-05-23.d73a065e" integrity="sha384-BoulfjXBzTzKZepcXtJ55HOBvZ6Z1vlJ2F1/oKeG0duSBmbq+8iuuNRBq9cOEtuS" defer></script>
<script src="/sw-register.js?v=2026-05-23.d73a065e" integrity="sha384-MP2//mwcEop223nSOjLo88jfXSPa31Eq/z1M55MMGtlxrYow4JwOcBY7y17k25Hj" defer></script>
<script src="/js/reveal.js?v=2026-05-23.d73a065e" integrity="sha384-gJrD72vW4itE2hwAmR5NxJ+cM2fYK9g539BMlbkVo1XCnRQB9/7lgK7NeueXVxtX" defer></script>
<script src="/js/overlay.js?v=2026-05-23.d73a065e" integrity="sha384-l+Vc3PNJDjvx8gi1aRUleJISQOkRCwQLPmHpkv8eqTuGrVwSBV5RPYHAmXLvOUar" defer></script>
<script src="/verify/verification-data.js?v=2026-05-23.d73a065e" defer></script>
<script src="/js/copy.js?v=2026-05-23.d73a065e" integrity="sha384-DdRZwwcGiuQPESkhWLaQFW0uVBQlUTAGClbjri9fGyp6+tNTK1InuNzZ7HoaCBXN" defer></script>
<script src="/js/edition.js?v=2026-05-23.d73a065e" integrity="sha384-cN14MAsjXYPB/8YCL5yCVDJyxu0gOn1VRtQgKd7IwewcZtx1X32yTpfoUzkiA1D+" defer></script>
<script src="/js/verify-modal.js?v=2026-05-23.d73a065e" integrity="sha384-Q0iI1qkIJDhbE2icuiPlRJ13yLrteYd8bSCbdetGS+wOcPAcmK466/lkI0G3OWqM" defer></script>
<script src="/js/fonts.js?v=2026-05-23.d73a065e" integrity="sha384-hqccZnNIbxh/tvycK1UR5+oe9gifY+gHe/QZiwKcEtJa3RWkSjMIUQhb3jZRfx01" defer></script>


<!-- print-only utility sheet -->
<div class="print-utility-sheet print-only" data-print-sheet="integrity-verify-locally" hidden aria-hidden="true">
  <header class="print-utility-header">
    <p class="print-utility-kicker">Integrity verification</p>
    <p class="print-utility-title">Verify locally</p>
    <p class="print-utility-lede">Detached verification notes for independently checking the signed integrity manifest using the published public key.</p>
    <p class="print-utility-meta">Edition 2026-05-23 · trentpower.fr/integrity/verify-locally/</p>
  </header>

  <div class="print-utility-grid">
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">01</span> <span>Temporary keyring</span></p>
          <p>Use a temp GNUPGHOME so the import does not touch your main keyring.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">02</span> <span>Import public key</span></p>
          <p>curl /.well-known/pgp-key.asc · gpg --import pgp-key.asc.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">03</span> <span>Verify signature</span></p>
          <p>gpg --verify integrity.json.sig integrity.json - expect Good signature.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">04</span> <span>Check manifest</span></p>
          <p>/integrity.json lists every public file with its SHA-256.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">05</span> <span>Compare checksums</span></p>
          <p>Re-hash any file and compare against the manifest entry.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">06</span> <span>Reproducibility notes</span></p>
          <p>Each signed edition is frozen in /integrity/releases/. No mutable assets.</p>
        </div>
  </div>

  <footer class="print-utility-footer">
    <div class="print-utility-footer-text">
      <p class="print-proof">Private · Static · Signed · No tracking</p>
      <p>Edition 2026-05-23 · trentpower.fr/integrity/verify-locally/</p>
    </div>
    <div class="print-qr-block" aria-hidden="true">
      <img class="print-qr-image" src="/images/qr/qr-verify-locally.svg" width="144" height="144" loading="lazy" decoding="async" alt="">
      <p class="print-qr-url">trentpower.fr/integrity/verify-locally/</p>
    </div>
  </footer>
</div>

</body>
</html>
