Keep the work.
Share the proof.
VERSIONPASS is an early, local-first Solana devnet prototype for identifying which exact creative file was delivered and approved. A file's SHA-256 fingerprint, a designated reviewer, and the preceding version are bound into an immutable version commitment. Approval is a separate record bound to that version and reviewer.
What leaves this browser?
Only a version or approval commitment, public test signing addresses, and transaction metadata go to the public Solana devnet. Original file bytes, filenames, notes and signing keys are not uploaded. This prototype keeps session signing keys in memory only. Refreshing loses them; exported receipts contain public records, not keys.
What does a check establish?
A local SHA-256 comparison establishes byte equality. A live devnet check asks the named public RPC for the transaction and finalization status, then checks the exact Memo instruction, expected signer and matching slot. Imported receipts do not become verified until queried again. A pending transaction can be rechecked by its existing signature without sending it again. Delivery verification alone never means reviewer approval; a missing approval or a request for changes remains explicitly unapproved. A public key does not establish a person's legal identity. Client timestamps are claims; transaction block time is reported separately.
What is still a prototype?
The creator and reviewer in the devnet test session are both temporary identities generated in one browser. This demonstrates distinct signatures, not two independently verified people. There is no production multi-user handoff, wallet integration, durable key recovery, mainnet support, payment, file hosting or legal-signature claim. A synthetic sample has no blockchain transaction and is labeled accordingly.
Privacy and limits
Never use a sensitive file merely because it is not uploaded: public commitments and test addresses can still be linkable. Choose synthetic material for the demo. Files are currently limited to 64 MiB and imported receipt JSON to 256 KiB. Unknown receipt fields are rejected. The app requests typography from fonts.googleapis.com and fonts.gstatic.com, which receive ordinary network metadata; these font requests do not include chosen files or signing keys. The app itself includes no analytics or advertising code. This public site is served through Cloudflare, which receives ordinary request metadata and may add a site analytics script. The app does not send selected file bytes or signing keys to that service. CLI/RPC airdrops are discontinued. This app never requests tokens or automates the faucet. Its test-balance button only reads the current creator address on finalized devnet; an unknown balance is not a confirmed zero, and a sufficient balance is not delivery verification. If you choose to obtain free devnet SOL, use the official faucet manually with the displayed public creator address. Do not use a real wallet or real funds. Keep this page open because refreshing discards its keys. Devnet services may be unavailable or reset; unavailable transaction evidence remains unverified.
Built with original application code, Web Crypto SHA-256, the Solana SDK and the official Memo program. Part of MICRO USADA.