Audit & transparency

This view helps auditors and operators quickly verify that the ecosystem is consistent: canonical URLs, signatures, manifests, and service health. It does not create or modify trust.


    

Checklist

Verify locally (CLI)

# verify trust root manifest signature
curl -sS https://www.onetoo.eu/.well-known/sha256.json -o sha256.json
curl -sS https://www.onetoo.eu/.well-known/sha256.json.minisig -o sha256.json.minisig
curl -sS https://www.onetoo.eu/.well-known/minisign.pub -o minisign.pub
minisign -V -p minisign.pub -m sha256.json -x sha256.json.minisig