Green: the file is what was signed

  • Made with LollyIntact, and it records a Lolly export. An enrolled signer adds a Signed by line.
  • VerifiedIntact, and the certificate chains to a pinned trust anchor. For files Lolly did not make.
  • Delivered by LollyA catalog asset Lolly distributed. It chains to the Lolly root, and someone else is its author.
  • Credential intactIntact, signed by an anonymous on-device key.

Amber: an honest middle ground

  • Likely made with LollyThe record checks out, but this copy's bytes were re-saved or re-encoded.
  • Credential expiredNothing changed, but the signing certificate has lapsed.
  • Credential could not be checkedThe credential could not be read out, so nothing was compared.
  • Not all of this file is coveredThe covered bytes match, but part of the file was never signed.

Red: changed after signing

  • Credential brokenThe bytes no longer match what was signed, or the credential is damaged.

Grey: nothing to compare

  • No Content CredentialsThe file carries no manifest. It is still checked for an Imprint and hidden data.
  • Credential stored elsewhereThe file points at a credential kept elsewhere, which Verify does not download.
  • Not inspected as textToo large to search on the device, so nothing is claimed either way.