RandKeyKit — Verification Harness

Use this page to verify the local-first trust story: no network during generation, static service-worker caching only, and a published build hash.

Verify it yourself

  1. Open DevTools → Network, keep the tab recording, then generate any key or token on the main page. You should see zero new network requests during generation.
  2. Open build-hash.txt and compare the published SHA-256 lines with a local `sha256sum` over the same files.
  3. Inspect sw.js and confirm the cache list contains only static shell URLs: HTML, CSS, images, fonts, and JS modules.
  4. Check the footer link on the main page and confirm everything is same-origin. Because of that, RandKeyKit does not add dummy SRI attributes to self-hosted scripts; strict CSP + HTTPS + the published build hash are the stronger trust controls here.

Running automated assertions against the current generators and crypto primitives...

Loading modules...