Check the chain has not been changed

What you get: confidence that the record itself is intact. One receipt proves one event; this proves nobody rewrote the history around it.

1. See the witness

the witness at a glance Copy

$ quox governance ward statusWARD Status─────────────────────chains            3entries           4221418tips              41796enabled           yesissuerId          ward:collectorduplicates        0errors            0lastWitnessedAt   2026-10-13T20:34:00.763Z$ quox governance ward chainsChain ID                                Createdward:meta/quox-global                   2026-03-17T13:41:11.595Zward:org/quox/env/production            2026-03-14T08:02:22.509Z

From a real run on our own install. One plugin chain and two counters left out.

2. Verify a stretch

A chain can hold millions of entries, so you verify it in slices. This slice covers the receipt from Check a receipt yourself:

verify a slice Copy

$ quox governance ward verify --chain ward:org/quox/env/production --from-seq 4171150 --up-to-seq 4171210WARD Verify: ward:org/quox/env/production──────────────────────────────────────────────────status                PARTIALentry_count           4179789head_seq              4171210head_chain_hash       564b09878663d3ee5596097c4e161628ba64a332d50d4edc0d138d03e...genesis_verified      noverified_range  from: 4171150  to: 4171210tips_verified         1signatures_verified   1warnings              []reason                WINDOWEDChain status: verified bounded (seq 4171150..4171210 of 4179789); page with --from-seq/--up-to-seq for full coverage.

From a real run on our own install. Hashes shortened by the CLI.

PARTIAL with reason WINDOWED is a pass for the slice you asked for: every link from 4171150 to 4171210 re-hashed correctly, and the one signed tip inside it verified. It is called partial because the rest of the chain was not part of this check, and the CLI says so rather than rounding up to “verified”.

To check from the very first entry, start at 1. genesis_verified: yes then tells you the chain’s first link is the real one:

quox governance ward verify --chain ward:meta/quox-global --from-seq 1 --up-to-seq 50

What just happened

You re-computed the chain’s hashes yourself and checked its signatures. If anyone had edited, removed or reordered an entry in that range, a hash would not match and the status would say so.

Check it yourself

Page through a whole chain by moving the window: --from-seq 1 --up-to-seq 50000, then --from-seq 50000 --up-to-seq 100000, and so on. Each call is bounded so it stays quick.

Undo

Nothing to undo: verifying only reads.

Next

• Pre-approve a narrow lane