---
title: "Verify check manifest integrity"
method: GET
path: "/verify/{check_id}"
tags: ["verify"]
---

# Verify check manifest integrity

`GET /verify/{check_id}`

## Request

- Base URL: `https://api.trueight.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.trueight.com/verify/{check_id}`
- Auth: none declared

Verify the signed manifest for a completed check.

Confirms the signed fields haven't changed since signing.

**Public endpoint** — no authentication required.

Two-step verification:
1. **Signature authenticity** — proves the manifest wasn't forged
2. **Data integrity** — proves the database wasn't mutated since signing

Returns `{valid: true, ...}` on success, or `{valid: false, reason: "..."}` on failure.

**Rate limit:** 60/minute per IP

## Path parameters

- `check_id` string, required

## Response `200`

Verification result — check `valid` field

- VerifySuccessResponse: Successful manifest verification — data integrity confirmed.
  - `valid` boolean: Always true on successful verification
  - `checkId` string, required: Verified check ID
  - `signedAt` string, required: When the manifest was signed (ISO 8601)
  - `kid` string, required: Signing key ID
  - `executedTier` 'lookup' | 'consensus' | 'quick' | 'full': Agent pipeline tiers — determines depth and cost.
  - `pipelineFingerprint` string, nullable: SHA-256 fingerprint of pipeline model configuration (first 12 chars)

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/trueight/apis/tru8-evidence-research-api.md) · [All operations](https://skmtc.dev/trueight/apis/tru8-evidence-research-api/llms.txt) · [OpenAPI document](https://skmtc.dev/trueight/apis/tru8-evidence-research-api/revisions/5684065fa01a?raw)