A hash chain only proves editing was caught
A chain rebuilt from genesis after deleting inconvenient records still verifies. Counter-signed head attestation is the part that catches deletion, and you can verify a signature without an account.
A manufacturer hands you a Declaration of Conformity, an attestation, or a safety verification bundle. Your job is to check whether it is real, current, and internally consistent — and you should not need to buy anything to do it.

A chain rebuilt from genesis after deleting inconvenient records still verifies. Counter-signed head attestation is the part that catches deletion, and you can verify a signature without an account.
The firmware says 3.9.0; the supplier’s published hash for 3.9.0 does not match what is on the machine. That mismatch is a first-class, reportable finding — not silently ignored.
Every verification route — Declaration check, manifest diff, bundle re-check, attestation verify — runs with no account, by design.

Declaration check, bundle re-verification, and attestation verification are engineered as always-free — the buyer or auditor is never the paying customer.
Read moreA signature over the ledger head by a key the operator does not hold — the one thing that catches a ledger that was quietly shortened.
Read moreVerification stays free, forever, at every tier. Start there.