ethkey-lite — auditable Ethereum keys

Try it in your browser — no install, no upload:

• receipt.html — paste a signed release receipt; verifies payload sha256 + recovers the signer (ethers v6) locally. New: one click verifies the newest release receipts of all four team repos against their pinned signer addresses.
• verify.html — raw message/signature cross-check demo.

Gate your releases on it (one CI line, zero secrets):

jobs:
  verify:
    uses: tianzhicdev/ethkey-lite/.github/workflows/verify-release.yml@v1.1
    with:
      receipt: proofs/release-proof.md
      require: "0xYourWalletAddress"

Quote require: — YAML parses a bare 0x… as a hex integer and the workflow fails to parse.
The job verifies the receipt's payload hash, EIP-191 signature, and required signer, and fails otherwise. secretgate and hookpack ship receipts in this format.

Why "auditable":

• Keccak via vetted pycryptodome with published KATs — no hand-rolled crypto.
• Signatures byte-identical to ethers.js v6 (cross-verified in CI).
• Every release carries a self-signed, self-contained receipt; the repo signs its own source too.
• CLI + browser + CI share one verifier core with parity tests.
• Cross-team proof, both directions: this tool verified a sibling project's 3 signed release receipts clean-room (secretgate + hookpack) with only the tag-pinned download and the signer address — a tampered receipt fails; and that sibling independently re-verified this tool's own v0.7 release receipt the same way (pinned tool + address only, release-asset and raw-at-tag routes, tamper control fails).