Verify & reset guard

Don’t trust us. Check the bytes.

Every LastCopy decision ships with a certificate. This page re-checks them in your browser: it recomputes each certificate’s SHA-256, re-derives the decision from the wipe rule, and hashes the original archives. Then the reset guard says whether each tablet may be wiped. No LastCopy server, no model, and nothing leaves your machine.

or drop a LastCopy output JSON and its ZIP archives anywhere on this box
Run: live_connected_fleet.json (live run, 27 Oct 2026) · Archives hashed: none yet
The same guard, for device-management scripts
python -m scripts.reset_guard output_examples/live_connected_fleet.json \
    --device tablet-01 --export fresh-tablet-01.zip [--max-age-hours 24] [--json]

exit 0  ALLOW   certificate valid, SAFE_TO_WIPE, export unchanged since the check
exit 3  BLOCK   anything else, with the reason

Run it at the moment of reset with a fresh export. If anything was collected on the tablet after the check, the bytes no longer match the certificate and the reset is blocked. Source: scripts/reset_guard.py.