# Apex reproduce kit

Check the published Cycle 2 signed projection on your own machine. You need Node. You do not need npm, a network connection, or this website.

## Files

- `verify.mjs` — the offline verifier
- `signed-projection-2026-09-11.json` — the published projection, byte for byte
- `projection-public-key.b64` — the pinned Ed25519 SPKI public key, copied from `LIVE_PROJECTION_PUBLIC_KEY_B64` in `lib/projection.ts`

The pinned key is:

```
MCowBQYDK2VwAyEA4SewVRRH0cHh4Ib5yCIh+G8l5f0fhb33d3S5dsjboOE=
```

## Run

```sh
node verify.mjs signed-projection-2026-09-11.json
```

`PASS` means the evidence digest and the Ed25519 signature both checked against the pinned key. `FAIL` means they did not. The script does not recompute the test run, and it does not open a network connection.

A valid signature does not prove key provenance beyond this pinned key, and it does not audit the private receipts.