Creator workstation · Windows
Your image in.
A case that answers back.
Start with the PNG, JPEG, TIFF, BMP, or WebP you already have. Obsign preserves the source bytes, records custody, signs the claims, re-runs the result, and exports one portable .obcase for any recipient to verify.
- LOCALEvidence processing
- ENCRYPTEDExaminer identity
- SELF-CHECKEDBefore export
Original bytes preserved
Portable · signed · reproducible
- SHA-256Source boundPASS
- ED25519Custody signedPASS
- RE-RUNResult reproducedPASS
Not a web uploader. The creator belongs beside the evidence, keys, and operator—not between a browser and a server.
Why local mattersRelease channel · stable
Get the Evidence Workstation.
The public installer appears here only after the application, restricted sidecar, EXE installer, and MSI are all organization-signed, independently timestamped, malware-scanned, downloaded again, and byte-checked.
Publisher must read “Coherence Energy Labs.”
Windows should never show an unknown publisher for a production Obsign release.
Checking the sealed release record…
PRIVATE PILOT
Creator access is issued directly.
The workstation is usable now; the public installer is being withheld until its organization code-signing identity and external release checks are complete.
Request creator access No unsigned public download. No “unknown publisher” shortcut.Obsign
- Authenticode publisher
- Certificate thumbprint
- Source revision
RELEASE WITHHELD
The release record did not validate.
No download link is shown when the signed release description is malformed or incomplete.
Contact the Obsign teamThe golden workflow
No package required.
You create the first one.
The browser verifier is the receiving side. The Evidence Workstation is the front door for the photographer, examiner, newsroom, investigator, or post-production operator.
- 01CHOOSE
Open ordinary evidence
Select the source image. Obsign reads it locally and preserves its original bytes before any operation.
PNG · JPEG · TIFF · BMP · WEBP - 02IDENTIFY
Name the case and examiner
Create a passphrase-encrypted signing identity in the app or use an organization-managed identity.
KEY NEVER IN ARGV - 03CREATE
Process, sign, and re-run
The workstation records custody and will remove a new output if independent verification does not reproduce it.
FAIL CLOSED - 04HAND OFF
Export one challengeable case
Send the
FREE TO VERIFY.obcase. The recipient needs no account, license, or Obsign server to verify it.
A deliberate security boundary
Why this is a desktop creator—not an upload form.
A website is excellent for independent verification because the recipient controls the file and the computation can stay in their browser. Creation is different: it uses a signing identity, retains original evidence, writes a new case, may need offline trust anchors, and must survive interrupted writes. Those responsibilities belong in a signed local application.
Read the security model- 01
Original evidence stays local. No server copy, upload queue, or cloud retention policy sits between the operator and the source.
- 02
The signing key stays encrypted. Passphrases travel over local stdin, not command-line arguments, analytics, or browser storage.
- 03
Verification remains independent. Recipients can use the free browser verifier or the open standalone verifier without buying the creator.
Two sides of defensible evidence
Create locally. Verify anywhere.
Start a creator pilot now, or challenge a case you have already received.