Independent verifier
Paste a signed realhandles.json, or a URL that serves one (a profile, a raw file, or someone's own /.well-known/realhandles.json). Verification runs entirely in your browser. It checks the signature against the public key inside the manifest, so it holds even if RealHandles is gone.
What "verified" means here: the file is signed by the key it claims. To trust that key belongs to a specific person, pin the key fingerprint the first time you see it (trust on first use) and confirm it stays the same. The domain is only a pointer; the key is the identity.