Paste a DomainAttest attestation and verify it entirely in your browser: the ES256 signature is checked against the issuer’s published JWKS, then every validation step from section 3.5 of the specification runs locally. Nothing you paste leaves this page. No token handy? Generate a sample signed by this site’s demo issuer.
The replay check remembers token IDs in this browser’s local storage, the same way a relying party tracks jti values. Verify the same token twice to see it fire.