Public proof
PatchLabs proof page
A dated, public record of an app’s last PatchLabs check, published by the app’s owner.
No app selected
Proof pages are linked from an app’s PatchLabs badge, with an address like patchlabs.dev/proof?app=<app id>. Owners turn them on in their app settings.
Reading a proof page
What each status means.
| Status | Badge | Meaning |
|---|---|---|
| no known leaks | The last finished check found no personal data that an anonymous visitor or a signed-in stranger could read, in the tables we could rebuild. | |
| fix in progress | The last check found a leak and produced a fix for the owner. Details stay private until it’s fixed, so nothing here helps an attacker. | |
| not checked yet | The app is verified but its first check hasn’t finished. | |
| private | The owner hasn’t made this app’s status public, or the link is wrong. |
A proof page is not a certification. It reports our last check of the database access rules in the app’s repo. It doesn’t cover the rest of the app, and it can’t see changes made directly in the live database. See our limits.
Verify a receipt
Check a signed receipt yourself.
Every finished check has a receipt signed with Ed25519. Paste a check ID (the owner can share it from their report link) and your browser fetches the receipt and our public key, then checks the signature itself. We never see the result.
Prefer to do it offline? The same check in 12 lines of Python is on the security page. Signed bytes: the receipt object as JSON with keys sorted and no spaces.