ACTIVE PANDEMIC ALERT: Oct 2026 PHP2Shell (CVE-2026-109618) · Node2Shell (CVE-2026-111497) · React2Shell — Run Free 3-Second In-Browser AST Inspection →
PUBLIC LEDGER GATEWAY

Attestation & Signature Verifier

Enter any HadayaLab Attestation ID or load the demo record to verify cryptographic validity and DSSE Ed25519 signatures.

STATUS No Findings in Scope
Attestation ID: HL-2026-DEMO
Authority: 45x Skill Badges
Algorithm: Ed25519 DSSE Envelope
Window: Valid 7 Days
Key ID: hadayalab-attest-2026-ed25519-k1 View Public Keys →
CRYPTOGRAPHICALLY SIGNED CYCLONEDX 1.6 SBOM ATTESTATIONS

Sample Public Audit Envelopes

Directly inspect and cryptographically verify our live DSSE Ed25519 audit envelopes against our public JWKS key (hadayalab-attest-2026-ed25519-k1):

PAIN-2026-001 Ed25519
PHP2Shell Runtime Memory Corruption & Stale Pointer RCE
↓ Inspect PAIN-2026-001.cdx.json →
PAIN-2026-002 Ed25519
Node2Shell Native C++ Brotli OOB Write RCE
↓ Inspect PAIN-2026-002.cdx.json →
PAIN-2026-003 Ed25519
Legacy PHP 7.4 / 8.0 / 8.1 EOL Virtual Patching & Replacement BOM
↓ Inspect PAIN-2026-003.cdx.json →
PAIN-2026-004 Ed25519
React2Shell & Node2Shell Next.js Server Action Combined Audit
↓ Inspect PAIN-2026-004.cdx.json →
PAIN-2026-005 Ed25519
Docker & AWS Lambda Stale Base Image Supply-Chain Blindspot
↓ Inspect PAIN-2026-005.cdx.json →
PAIN-2026-006 Ed25519
Wave 2 Pandemic: AI Agent & MCP Skill Poisoning Audit
↓ Inspect PAIN-2026-006.cdx.json →
DYNAMIC SVG EMBED BADGE
HadayaLab Attested Badge
[![HadayaLab Attested](https://hadayalab.com/badge/HL-2026-DEMO.svg)](https://hadayalab.com/verify)