Verify this app

Every Intento release is a list of files with their fingerprints, signed by the people who release it. This page checks that the code you were served is the code they signed.

Reading the release…

What this page cannot prove

This check runs in the same page it checks. If an attacker controls what this site serves, they can also change what this page says. Treat a green result here as “nothing looked wrong”, and a red one as a stop. For a check that does not trust this site, run the verifier on your own computer:

git clone <repository> && cd intento
git checkout <commit>
npm ci --ignore-scripts && npm run build
npm run release:manifest
npm run release:verify -- https://your-site --against public/release/manifest.json

That rebuilds the code from source, then compares your build with the signed release and with every file this site serves.