Drag & drop the attestation files here

Expected: `occasio-attestation.json` + (optionally) `occasio-attestation.sigstore.json`.
Download both from the workflow run's Artifacts section, then drop them here together.

or choose files…

## Summary

## Checks

The browser walks the audit chain client-side and re-verifies the DSSE payload matches the attestation. The Sigstore signature is verified by an offline tool (`occasio attest verify`) or by opening the Rekor entry below — this page does not perform crypto verification on the cert chain.

## Blocked attempts

Tool | Target | Rule | When
--- | --- | --- | ---

## Raw attestation