This page shows exactly what your passkey will sign. It checks every hash itself; the server and the console cannot change what is shown here.
Development profile: the instance ID is not pinned in config.json.
LoadingStarting the signing page...
Run PowerShell command
Technician explanation hash verified
What the staff member sees hash verified
Passkey challenge = SHA-256 of the canonical envelope
Canonical envelope (the exact bytes hashed)
Start signing for this session
One passkey confirmation now. After it, every command you click Authorize & send on in this session is signed on this page automatically, with no further prompt, until the session ends or the time below. The signing key is created here and cannot leave this page.
Passkey challenge = SHA-256 of the canonical session grant
Canonical session grant (the exact bytes hashed)
Session signing is on
Keep this window open or minimised. Each command you authorize in the console is checked and signed here, and listed below. If you close it, the console reopens it on the next command.
Signed in this window
Nothing signed yet.
Sign approved-technician list
Technicians
| Technician | Roles | Scope | Signing passkeys |
|---|
Groups
Clients
Revoked devices
Passkey challenge = SHA-256 of the canonical document
Full document
Create a signing passkey
New passkey fingerprint (SHA-256 of the public key, first 128 bits)
Algorithm: