-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

ATTEST PROJECT SITE - SIGNED INTEGRITY MANIFEST
Generated: 2026-10-02T22:10:53Z
Signing key: 2B96CD0E01A862E650A12C68D4F471A935E054FD
Public key:  https://attesting.dev/signing-key.asc

Every file retrievable from attesting.dev, with its SHA-256 digest. This
list is generated from the deploy directory itself, so it is complete:
there is nothing you can fetch from this domain that is not on it.

Paths are relative to the site root. Note that /index.html redirects to /,
so follow redirects when fetching it:

  curl -sL https://attesting.dev/index.html | sha256sum

Two files are deliberately absent. This manifest cannot contain its own
hash. And _headers is configuration consumed by the host rather than
content served to you - requesting it returns the index.html fallback,
so a digest of that response would be meaningless. The headers it
produces are checkable directly, on any response from this site.

If a hash below does not match the file you received, you are not looking
at our site.

This manifest is signed with the same key whose fingerprint this site
publishes. That is deliberate and it is circular: it proves the files
were not altered after signing, not that the key is the right key.
Verify the fingerprint against VERIFYING.md in the repository.

d9e8769f6810345dcd31e78de73cbe4193628c68d209f43a832dd067428c5758  favicon.svg
aa71e5e0876500047749171fa50e811bc18867ce2a61726ac5d8f35c823bf25d  index.html
e66a16779019b9e75f9da2b62dd877c6718725f27729de42e4f62b0ffdea2dcd  signing-key.asc
-----BEGIN PGP SIGNATURE-----
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=i6DR
-----END PGP SIGNATURE-----