RandKeyKit — Verification Harness
Use this page to verify the local-first trust story: no network during generation, static service-worker caching only, and a published build hash.
Verify it yourself
- Open DevTools → Network, keep the tab recording, then generate any key or token on the main page. You should see zero new network requests during generation.
- Open build-hash.txt and compare the published SHA-256 lines with a local `sha256sum` over the same files.
- Inspect
sw.js and confirm the cache list contains only static shell URLs: HTML, CSS, images, fonts, and JS modules.
- Check the footer link on the main page and confirm everything is same-origin. Because of that, RandKeyKit does not add dummy SRI attributes to self-hosted scripts; strict CSP + HTTPS + the published build hash are the stronger trust controls here.
Running automated assertions against the current generators and crypto primitives...