drop stir/shaken passport · validate signer + attestation level · timeline + findings export · runs locally
flags attestation C · expired iat · self-signed chain · tn mismatch · severity/reason per finding
local parse only — no online cert revocation check · signature not verified without trusted CA keys · heuristic screener · not definitive proof