Integrity
Verify what you run
Your browser fetches every file Obleevo is made of, computes its SHA-256 fingerprint itself, and compares it with the list this server published for this version. Nothing is sent anywhere.
Nothing has been fetched yet.
Combined fingerprint
One SHA-256 over every file and its own hash, in a fixed order. Two people who get the same number were served exactly the same code.
What this proves, and what it does not
If everything matches, the code you are running is the code this server published — nothing was altered on the way, by a stale cache or by anything in between.
It does not prove the server itself is honest: a server that serves modified code can serve a modified list with it. What it cannot do is serve one person something different from everyone else without the fingerprints disagreeing. So compare the combined fingerprint with someone else, on another device and another network: the same number means the same code.