This page carries the whole verifier inside it. Nothing is sent anywhere — the cryptographic check runs in your browser, on your machine, even with the internet off. The strategy stays sealed; you learn whether the proof is real, and which era of the MIZAN engine minted it. This offline check is the product: a MIZAN credential is only worth what a stranger can verify without trusting MIZAN.
How this is trustless: the verifier program is compiled to WebAssembly and embedded in this file. It re-derives the credential's guest fingerprint, checks the zero-knowledge proof, and confirms the sealed verdict, gate policy and cost floor — all locally. It then matches the credential's engine fingerprint against MIZAN's published list (baked in below) and its data root against the canonical dataset roots. A green result means a real proof from a published MIZAN engine on canonical data. It does not mean future returns.
The era registry, in one paragraph: every credential is minted by a specific, fingerprinted build of the MIZAN engine — an era (v6 → v11; current era v11 · validation-complete, both schools of backtest honesty in-circuit). The list baked into this page is append-only: a credential from a superseded era still verifies against the id of its era, forever — superseded is not revoked. If a bundle's fingerprint matches no published era, this page reports UNRECOGNIZED ENGINE: the proof may be mathematically valid, but it was not produced by any engine MIZAN has published, so none of MIZAN's gate, cost-floor or statistical guarantees apply — treat it as untrusted.