Verification runs entirely in your browser, against a root you can replace. Break the receipt on purpose and watch which property fails.
Nothing on this page trusts a field because it was written down
Every property is recomputed from the receipt itself and from the root you supply. Clear the root field and
the page tells you what inclusion alone proves — membership in a tree the issuer chose, which is a weaker claim
than most vendors distinguish.
The signature code, checked here, on your machine
Question 5 of the Module 7 bank is “show me a proof failing verification.” The buttons above are that
demonstration. This section is the other half: the Ed25519 implementation this page runs is checked against the
RFC 8032 test vectors, in your browser, right now — because a verifier you cannot run is not a verifier.