See it for yourself
This is what your client opens.
Below is a real evidence package, exported by WorkSealed exactly the way one leaves your Mac. Open it and the checks run in your browser, on your machine, with no network involved. Turn your Wi-Fi off first if you want to be sure.
The client is invented and the work was generated on a test machine, but nothing else about this file is a demonstration. The seals, the signature and the timestamp are the real thing — which means you can also break it: change a digit in manifest.json, reopen the page, and watch it refuse.
- Invoice
- INV-2026-0001
- Billed to
- FooBarTech
- Period
- 20 August 2026 – 4 September 2026
- Tracked records
- 7
- Manual lines
- 1
- Signing key
- e041 1b38 69b4 bc48
- Timestamped by
- FreeTSA, 14 September 2026
Running live, in an ordinary page of this site. It is the same verify.html that sits inside the downloaded package — no copy, no simplification.
Where the proof stops
It proves records, not people.
Everything the page reports is about the records themselves: that the billed hours match what was captured, that nothing was altered afterwards, that it was signed by the holder of the key shown, and that it existed no later than the timestamp says.
What it cannot tell you is who was at the keyboard. Tying that key to a person happens the ordinary way — a contract, or the same key showing up on invoice after invoice. The verifier also stops short of validating the timestamp authority’s certificate chain, because a page running offline has no trust store to check it against; the package’s README.txt gives the openssl ts commands for anyone who wants to go that far.
And the manual line in this sample is exactly what it looks like: a fixed fee somebody typed in. It carries no captured evidence, the verifier says so plainly, and the signature covers only the fact that it was on the invoice when it was sent.