Bitpoort's public trust demo: a real HMAC-SHA256-signed compliance report on an OFAC-designated (Lazarus Group) Ethereum address, rendered live from the public verify endpoint. The page holds no report data of its own — what you see is the proof chain working. No account needed.
curl https://api.bitpoort.com/v1/verify/1e443efa701c4df1084446296b048dafab849b7f5c798f3c4bb479c6995159b0
signature_valid — HMAC-SHA256 over canonical bytes, re-checked on every fetch.canonical_body — the full 9-section AML report: sanctions, PEP, adverse media, hack incidents, cross-chain bridge trace, source-of-funds, composite risk score, counterparty exposure, transaction findings.compliance_report_hashes.lazarus_full_sections).attestation.reproducibility (git_commit, alembic_head, eval baseline) and data_provenance row counts pinned at generation, so the snapshot stays auditable later.generate_compliance_report + export_compliance_pdf).