Download the three files below and run the verifier from this repo. Exit code 0 proves Ed25519 signature validity over the JCS-canonical manifest. The verifier ships standalone — no compute layer required.
# 1. Install the verifier (one-time)
pip install genomics-analysis # or clone the repo and pip install -e .
# 2. Verify
genomics-verify manifest.json signature.json --public-key showcase-public.pem
# Expected: OK — signature valid for this manifest.
# public key id: d72135b46db8ae1d…2276e3e
Public key fingerprint: d72135b46db8ae1d211a6e6e44f9efb2d1717efe5a18c276e543aab2d2276e3e. This is the showcase signing key; a production-rooted KMS key replaces it for paid runs (per SIGNING_KEY_PUBLISHING).
Click any row to download. SHAs match what's pinned inside the signed manifest.
| File | Size | SHA-256 | Action |
|---|---|---|---|
manifest.json | 3,821 | 599518212d32df99…699e17a | Download ↓ |
signature.json | 376 | 0e9da6f720dfd5a8…1b2ace31 | Download ↓ |
qc_report.json | 465 | f5af4a38ace9f29d…fcdff253 | Download ↓ |
bcftools_stats.txt | 30,525 | 177300fc98900a6c…603abde2 | Download ↓ |
flagstat.txt | 565 | 4f3467279c0f748a…8592352c | Download ↓ |
mosdepth.summary.txt | 8,462 | 432d3e4c5758bd92…9d9282c2 | Download ↓ |
HG002.30x_chrs.txt | 4,395 | d7f2264037d4a448…1df39edd0 | Download ↓ |
showcase-public.pem | 113 | — | Download ↓ |
HG002.30x.vcf.gz customer-only | 101,508,459 | 4fb4c416… (in manifest) | Available to verified customers |
HG002.30x.bam customer-only | 71,254,984,910 | b519ac83… (in manifest) | Available to verified customers |
The full VCF (96 MB) and BAM (66 GB) are large clinical artifacts; we gate them behind LOI signature in the real customer flow. Their SHA-256s are pinned in the signed manifest above — your QMS reviewer can audit the chain-of-custody without seeing the bytes themselves.
Every per-sample delivery ships a JSON QC report against QC_REPORT_SCHEMA. This is the actual JSON from the run above:
{
"schema_version": 1,
"job_id": "df1513436092423fb129c16913b53ea5",
"sample_id": "HG002-WGS-30x-SHOWCASE-2026-05-10",
"pipeline_version": "0.1.0-substrate-showcase",
"generated_at": "2026-05-11T13:00:00Z",
"qc_status": "PASS",
"qc_reasons": [],
"metrics": {
"alignment_rate_pct": 99.55,
"mean_coverage": 32.49,
"ti_tv_ratio": 1.99,
"het_hom_ratio": 1.42,
"variant_counts": { "snp": 3940122, "indel": 891103 }
}
}
You just saw the entire results experience without signing anything. If you want to run a real pilot — your own FASTQ, your own per-customer bucket, your own signed manifest — here's what changes:
gs://datamade-genomics-delivery/customers/<sha(your-email)[:16]>/uploads/ with per-prefix scoped IAM (Terraform module on the diligence page).