releases.pegana.xyz

pegana-replay

self-hosted mirror

A small CLI that verifies a Pegana alert. It re-derives the receipt hash byte-exact on your machine, and when a receipt carries an on-chain anchor it also cross-checks that signer-pinned commitment on Solana, so anyone can confirm the published history wasn't altered. Pass --offline for a hash-only check with no RPC call. Tamper-evidence, no trust required beyond the open-source code.

Install

curl --proto '=https' --tlsv1.2 -LsSf \
  https://releases.pegana.xyz/pegana-replay-installer.sh | sh

The installer detects your platform and downloads the matching pre-built binary when one is published for it; otherwise it prints a build-from-source fallback (Rust toolchain required).

Verify an alert

pegana-replay --alert-id <UUID>            # re-derive hash + verify anchor if present
pegana-replay --alert-id <UUID> --offline  # hash-only, no RPC call

Integrity

The installer is plain shell - nothing compiled, nothing obfuscated. Read it before piping to sh:

releases.pegana.xyz/pegana-replay-installer.sh