Somebody sent you a signed plan check. Is it real?
Drop the attestation file here. This checks the Ed25519 signature against the keys this service publishes — never against the key the file names itself — and shows you what the statement actually says, including the checks that did not run. Free, and no account.
Attestations are produced from plans. Make one on your own SKUs, then decide whether a signature on it is worth anything to you.
The engine is Apache-2.0 and unmetered on your own machines — what the hosted plans add is a signature only this service can make, state it keeps for you, and compute on its hardware.
Check it without us
You do not have to trust this page, or this service being up and honest. The open-source package verifies the same file offline against a key you pinned yourself:
pip install palletizer-full-stack palletizer attest verify plan.attestation.json
Where these come from
Only this service can produce one: the private key never leaves the deployment. Accounts on a paid plan mint them from POST /api/v1/attestations — a record that an independent validator checked a specific plan, which is the thing you can hand to somebody who was not there.