| Proves | The records below are exactly what was sealed at the stated times: any alteration since then, of even one byte, makes verification fail. Anyone can re-run that check with open tools and no PriviNet involvement. |
| Does not prove | That the underlying event was observed completely or accurately by the source system, what caused it, who is at fault, or that any tribunal will admit or credit these records. The automated analysis inside is context, not a finding. Authentication under FRE 902(13)/(14) addresses only whether records are what they claim to be. |
| Incident ID | 9bfdf4d6-b823-45a9-b2b0-c930f7e76eb8 |
| Event type | voice.interaction |
| Event time (UTC) | 2026-07-13T00:05:19.476639 |
| Received (UTC) | 2026-07-13T00:05:19.476887 |
| Source type | voice |
| External reference | n/a |
| Subject | n/a |
| Platform | synthetic_voice_platform |
| Call / session ID | demo-call-001 |
| Transcript digest (SHA-256) | 4e4fba031122d30120d7dccb7b6e915756d1824aabdce7daace18fb54d447ab5 |
| Audio digest (SHA-256) | 792522a13d9005835b836e293f4c9b87963f286ba3ca44bf3d8d302575690f0c |
| Audio duration (seconds) | 312 |
| AI participation | yes (agent) |
| Recording notice played (as asserted) | yes |
| AI disclosure played (as asserted) | yes |
| Customer acknowledged (as asserted) | yes |
This ProofPack verifies the sealed conversation record and its artifact hashes. It does not by itself prove transcript fidelity to the audio, speaker identity, consent legality, or legal admissibility. Consent and disclosure flags are recorded as asserted by the source platform, not verified by PriviNet.
The analysis section is PriviNet Lumra's automated, ruleset-based classification produced at intake. It is provided for context only. It is not a determination of what occurred, whether any action was or was not required, or who is at fault, and it should not be read as one. The evidentiary value of this ProofPack is that the signed records are authentic and unaltered, which anyone can verify.
| Risk score | 0.0 |
| Urgency | unassessed |
| Classification | sealed_conversation_record |
| Escalation required | False |
| Reason | n/a |
| Confidence | |
| Second-opinion check | not run |
| Ruleset | voice_passthrough_v1 0.1.0 |
This record seals a conversation event supplied by the source platform, represented by transcript and audio hashes and interaction metadata. No automated analysis of conversation content is performed, and Lumra makes no determination of what was said, transcript accuracy, speaker identity, or consent. The evidentiary value is that the sealed record is unaltered and independently verifiable.
| Signing class | Cloud-signed (PriviNet sealed this event at intake with a non-extractable HSM-held key; the source did not sign it) |
| Signature status | cloud_signed |
| Digests recomputed and matched | True |
| Signature valid | True |
| Checked at (UTC) | 2026-07-13T00:05:19.833422 |
| Composite record digest (SHA-256) | 4f20258a6609fb6ea7fad767af7a0c8a1649b33f9aa7702fa00e4b507c1b72e0 |
| Signing key id | kms-1944107aa98ec035 |
| Algorithm | ecdsa-p256-sha256 |
| Public verification key (hex) | 04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655 |
PriviNet production key held in a cloud HSM (non-extractable; not itself a third-party time-stamp or CA anchor)
A manifest signature binds this entire document, not just the inner records: the displayed fields, the signing metadata, and the digests of every included object are covered, so altering anything shown here breaks verification.
Independent timestamp anchor: an RFC 3161 token from https://freetsa.org/tsr fixes this record in time without relying on PriviNet's clock. Verify it with the instructions in the machine data below.
Second independent anchor: the same fingerprint was also timestamped by http://ts.ssl.com, an unrelated authority. Two independent institutions attest this record's place in time; each anchor verifies on its own, and this one is sealed inside the bundle, so removing it breaks verification.
Record is cloud-signed at intake; 4 trust check(s) ran; no anomalies flagged.
| Source integrity | |
| Cloud-signed by Lumra at intake (no verified source signature on this record). | info |
| Timing | |
| source-reported time to receipt: 0.0 s. | info |
| Policy | |
| Tenant is synthetic/non-regulated; regulated fields are blocked at ingest and never sealed. | info |
| Export/billing plan: free_pilot. | info |
None of the following 4 checks fired: eta_source_v1.signing_state, eta_timing_v1.receipt_delay, eta_policy_v1.regulated_data, eta_policy_v1.export_gate
Enumerated trust signals for this record. Each line is a check that ran and what it observed. This assesses signals; it is not a verdict on whether the underlying event was true. No anomalies means none of the listed checks fired.
This ProofPack is self-verifying with open tools and no PriviNet servers.
Hash the objects under canonical_inputs (NOT the human-readable bundle,
which is a display view). Use the canonicalization_spec exactly.
1. Recompute SHA-256 over the canonical JSON of canonical_inputs.normalized_payload, .analysis, and .evidence_window. Confirm each matches
proof_record.normalized_payload_hash, analysis_hash, and
evidence_window_hash respectively (an omitted evidence_window means the
stored evidence_window_hash is null).
2. Recompute the composite: SHA-256 of the UTF-8 string
'privinet.lumra.v1.event-proof|<payload_hash>|<analysis_hash>|<evidence_window_hash or empty>'.
Confirm it matches proof_record.event_hash.
3. Verify proof_record.signature over the ASCII bytes of event_hash using
proof_record.public_key_hex, per proof_record.algorithm:
- ed25519: 32-byte public key (hex), 64-byte raw signature (hex).
- ecdsa-p256-sha256: 65-byte uncompressed P-256 public key (hex,
leading 04), DER-encoded ECDSA signature (hex), message hashed with
SHA-256 (standard ECDSA verify over the ASCII bytes of event_hash).
A single altered byte in any canonical_inputs object breaks step 1, 2, or 3.For review and signature by your qualified person (IT director, records custodian, or forensic expert). This is a template, not legal advice.
The exact objects that were hashed, so a reviewer can reproduce every digest byte-for-byte. Hidden when printed.
{
"incident_id": "9bfdf4d6-b823-45a9-b2b0-c930f7e76eb8",
"canonical_inputs": {
"normalized_payload": {
"partner_id": "voice_demo",
"source_id": "demo-call-001",
"source_type": "voice",
"event_type": "voice.interaction",
"timestamp": "2026-07-13T00:05:19.476639",
"received_at": "2026-07-13T00:05:19.476887",
"trigger_timestamp": "2026-07-13T00:05:19.476639",
"subject_id": null,
"location": {
"lat": null,
"lng": null
},
"payload": {
"partner_id": "voice_demo",
"platform": "synthetic_voice_platform",
"platform_call_id": "demo-call-001",
"session_id": "demo-session-001",
"event_type": "voice.interaction",
"timestamp": "2026-07-13T00:05:19.476639",
"trigger_timestamp": "2026-07-13T00:05:19.476639",
"transcript_sha256": "4e4fba031122d30120d7dccb7b6e915756d1824aabdce7daace18fb54d447ab5",
"audio_sha256": "792522a13d9005835b836e293f4c9b87963f286ba3ca44bf3d8d302575690f0c",
"audio_duration_seconds": 312,
"participants": [
{
"role": "agent",
"id": "agent-demo-17",
"speaker_type": "ai"
},
{
"role": "customer",
"id": "customer-pseudonym-91",
"speaker_type": "unknown"
}
],
"ai_participation": {
"present": true,
"role": "agent",
"model_or_vendor": "synthetic-demo"
},
"consent": {
"recording_notice_played": true,
"ai_disclosure_played": true,
"customer_acknowledged": true
},
"transcript_redacted": true,
"redaction_note": "Synthetic demo; hashes only, no raw transcript or audio exists."
},
"metadata": {
"platform": "synthetic_voice_platform",
"platform_call_id": "demo-call-001",
"session_id": "demo-session-001",
"transcript_sha256": "4e4fba031122d30120d7dccb7b6e915756d1824aabdce7daace18fb54d447ab5",
"audio_sha256": "792522a13d9005835b836e293f4c9b87963f286ba3ca44bf3d8d302575690f0c",
"audio_duration_seconds": 312,
"participants": [
{
"role": "agent",
"id": "agent-demo-17",
"speaker_type": "ai"
},
{
"role": "customer",
"id": "customer-pseudonym-91",
"speaker_type": "unknown"
}
],
"ai_participation": {
"present": true,
"role": "agent",
"model_or_vendor": "synthetic-demo"
},
"consent": {
"recording_notice_played": true,
"ai_disclosure_played": true,
"customer_acknowledged": true
},
"transcript_redacted": true,
"redaction_note": "Synthetic demo; hashes only, no raw transcript or audio exists."
},
"evidence_window": {
"pre_trigger_window_seconds": null,
"post_trigger_window_seconds": null,
"media_digest_trigger": "792522a13d9005835b836e293f4c9b87963f286ba3ca44bf3d8d302575690f0c",
"proof_window_reference": null
}
},
"analysis": {
"risk_score": 0.0,
"urgency": "unassessed",
"classification": "sealed_conversation_record",
"explanation": "This record seals a conversation event supplied by the source platform, represented by transcript and audio hashes and interaction metadata. No automated analysis of conversation content is performed, and Lumra makes no determination of what was said, transcript accuracy, speaker identity, or consent. The evidentiary value is that the sealed record is unaltered and independently verifiable.",
"recommended_action": "None. This is a documentation and integrity record.",
"confidence": 0.0,
"watcher_score": 0,
"escalation_required": false,
"escalation_reason": null,
"secondary_ai_status": "not_needed",
"ruleset_name": "voice_passthrough_v1",
"ruleset_version": "0.1.0",
"analysis_version": "0.1.0"
},
"evidence_window": {
"pre_trigger_window_seconds": null,
"post_trigger_window_seconds": null,
"evidence_window_start": null,
"evidence_window_end": null,
"proof_window_available": false,
"proof_window_policy": null,
"proof_window_reference": null,
"media_digest_pre": null,
"media_digest_trigger": "792522a13d9005835b836e293f4c9b87963f286ba3ca44bf3d8d302575690f0c",
"media_digest_post": null
}
},
"canonicalization_spec": "Canonical JSON, matching the producer exactly: json.dumps(obj, sort_keys=True, separators=(',', ':'), ensure_ascii=False), encoded UTF-8. datetimes are ISO-8601 strings as already serialized in canonical_inputs. Hash each canonical_inputs object exactly as given; do not re-map or reorder.",
"proof_record": {
"id": "3b7a8b0c-5795-4777-b26f-ae68c6876856",
"event_hash": "4f20258a6609fb6ea7fad767af7a0c8a1649b33f9aa7702fa00e4b507c1b72e0",
"normalized_payload_hash": "a207fac30693daa3afce6716a4f3fc8620d9b1112888d55a14da4c34855c1237",
"analysis_hash": "c6f604025247c8a12f500bb61a1d6cc0e1593af6c84445c37f8e7411dedd520a",
"evidence_window_hash": "920123b3f7c79a75c89dcb8dcc262b27b9ad90184cc064cf7f851a2a1ee4f281",
"signature": "3046022100c752e8c3549ec1fc5dd4d863019c470d029e6a209b94268e5c105424a68d200a022100cd50d5e2351aef6de54e9e7a56248ee19b5431cea744b8dee9acad58d322e939",
"signer_type": "kms_hsm_key",
"key_id": "kms-1944107aa98ec035",
"public_key_hex": "04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655",
"algorithm": "ecdsa-p256-sha256",
"signed_at": "2026-07-13T00:05:19.713944",
"proof_mode": "cloud_signed",
"raw_payload_hash": "d875fa36c836bfcfbff9fdfc6b5c10931b2d6a62baf963621089a245b47687ff",
"hash_context": "privinet.lumra.v1.event-proof",
"signer_note": "PriviNet production key held in a cloud HSM (non-extractable; not itself a third-party time-stamp or CA anchor)"
},
"manifest": {
"manifest_version": "2",
"incident_id": "9bfdf4d6-b823-45a9-b2b0-c930f7e76eb8",
"generated_at": "2026-07-13T00:05:20.240482",
"event_hash": "4f20258a6609fb6ea7fad767af7a0c8a1649b33f9aa7702fa00e4b507c1b72e0",
"key_id": "kms-1944107aa98ec035",
"signer_type": "kms_hsm_key",
"algorithm": "ecdsa-p256-sha256",
"public_key_hex": "04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655",
"signed_at": "2026-07-13T00:05:19.713944",
"signing_class": "Cloud-signed (PriviNet sealed this event at intake with a non-extractable HSM-held key; the source did not sign it)",
"canonical_inputs_sha256": "353be36d66771ab31a78165bb2efaf4fe0a684ea8d2d6235bb2aa82a752d76e8",
"bundle_sha256": "284ac0adc4b62de5ea9a7bad4e920217170356166051f2e429f3c8d472e86be5",
"timestamp_anchor_status": "anchored",
"timestamp_anchor_imprint_sha256": "e90e93ff06db5907813de6491fcf52730e50ee8f8f90e0ec2be826a1d918f0cb"
},
"manifest_signature": {
"signs": "sha256 hex of the canonical JSON of `manifest`",
"manifest_digest": "c723ebae975f1f6ae7da454d18643078ca089d18469623f96f0cce879f90654f",
"signature": "3044022047b0464535ff63f6a15c70b5c346f65e02f134c6b077c1dd07cd28e8cb6b918c02206869769ed7b8c0a901b6bb84af9af5d3586b519b75100b2e486501302ba71e6c",
"key_id": "kms-1944107aa98ec035",
"public_key_hex": "04bc55de97e806fbeaf95298588a87cf7f1404640f7b9d359fbbc0f1b2bf408f8be837d1cfa641778a11fd9776be566a2c938b8891d29a7182c15500a05b2e6655",
"algorithm": "ecdsa-p256-sha256"
},
"timestamp_anchor": {
"status": "anchored",
"standard": "RFC 3161",
"authority": "https://freetsa.org/tsr",
"authorities_tried": [
"https://freetsa.org/tsr"
],
"hashed_field": "sha256 of the ASCII bytes of event_hash",
"imprint_sha256": "e90e93ff06db5907813de6491fcf52730e50ee8f8f90e0ec2be826a1d918f0cb",
"obtained_at": "2026-07-13T00:05:19.833671",
"token_der_base64": "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",
"verify_instructions": "This is a standard RFC 3161 timestamp response over sha256(event_hash). Decode token_der_base64 to token.tsr, write the exact event_hash string to a file (no trailing newline), then verify: openssl ts -verify -data <event_hash-file> -in token.tsr -CAfile <authority-ca.pem>. Use the CURRENT root certificate published by the authority named in this anchor (for freetsa.org: https://freetsa.org/files/cacert.pem). Authorities rotate their timestamping certificates over time; the token embeds the certificate that signed it, so verification needs only the authority's current root, not any archived certificate. A valid token proves this event_hash existed no later than the token's time, independent of PriviNet."
},
"timestamp_anchor_secondary": {
"status": "anchored",
"role": "secondary_anchor",
"standard": "RFC 3161",
"authority": "http://ts.ssl.com",
"hashed_field": "sha256 of the ASCII bytes of event_hash",
"imprint_sha256": "e90e93ff06db5907813de6491fcf52730e50ee8f8f90e0ec2be826a1d918f0cb",
"obtained_at": "2026-07-13T00:05:20.093906",
"token_der_base64": "MIIPGTAVAgEAMBAMDk9wZXJhdGlvbiBPa2F5MIIO/gYJKoZIhvcNAQcCoIIO7zCCDusCAQMxDTALBglghkgBZQMEAgEwdwYLKoZIhvcNAQkQAQSgaARmMGQCAQEGDCsGAQQBgqkwAQMGATAxMA0GCWCGSAFlAwQCAQUABCDpDpP/BttZB4E95kkfz1JzDlDuj4+Q4Owr6Cah2RjwywIIGoF9NOb2bPYYDzIwMjYwNzEzMDAwNTIwWjADAgEBoIIMADCCBPwwggLkoAMCAQICEB9rFmLSLhtsXfHAwaBgDjgwDQYJKoZIhvcNAQELBQAwczELMAkGA1UEBhMCVVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMREwDwYDVQQKDAhTU0wgQ29ycDEvMC0GA1UEAwwmU1NMLmNvbSBUaW1lc3RhbXBpbmcgSXNzdWluZyBSU0EgQ0EgUjEwHhcNMjUwMjE4MTYzMjAyWhcNMzQxMTEyMTg1MDA1WjBuMQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24xETAPBgNVBAoMCFNTTCBDb3JwMSowKAYDVQQDDCFTU0wuY29tIFRpbWVzdGFtcGluZyBVbml0IDIwMjUgRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQb+1FRx2/mVZbsT15XxNzOrYNF56vHYnPjt7zzgkaWpVDNbzvQPhkc0lVY8soB4WKwcOtlyxYdZL+3vskXf2k2o4IBWjCCAVYwHwYDVR0jBBgwFoAUDJ0QJY6apxuZh0PPCH7hvYGQ9M8wUQYIKwYBBQUHAQEERTBDMEEGCCsGAQUFBzAChjVodHRwOi8vY2VydC5zc2wuY29tL1NTTC5jb20tdGltZVN0YW1waW5nLUktUlNBLVIxLmNlcjBRBgNVHSAESjBIMDwGDCsGAQQBgqkwAQMGATAsMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5zc2wuY29tL3JlcG9zaXRvcnkwCAYGZ4EMAQQCMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMEYGA1UdHwQ/MD0wO6A5oDeGNWh0dHA6Ly9jcmxzLnNzbC5jb20vU1NMLmNvbS10aW1lU3RhbXBpbmctSS1SU0EtUjEuY3JsMB0GA1UdDgQWBBTOfNnABIDFJBBqCeocqyU9Ef2o0jAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQADggIBAIBzdSSFvWZTYqdOxX2Pa9SycCyk5dYf8va9QYw4BzBM+1Oye5gMt9icQNSi8owgiajZLkX4QxxhRH2bY0zq7uwEDA0g4lA7wgnN42s+acvYxr8CHuZ6ZC216l4QPkqgsxu9fVEooMIR5GK+7/DYl6GmNF7tN6dAYmWa3mZaZ4JhgffvOjfeBaiBcdiOWeYrru3eI+2gDmQTcX1PYxQyCBg7Vn1ngqRdEPKyxP9wxw5cySrOSJd4v1aDpe601Pd/KEq8TMMMOhgwZSl/Kxh8b5I4CG/TF5FYJSUgx7DQGQ3gkv4p2sShwPgobgfCuDsSMWupNXvnhwcqWpAGN8Lje8Oz5T5oTepOSHamZ9x2R7NlY6EfONWfcJlTxXRg3ZAWe1zpm+TmVGirn7L7REdFW2Ng5M2qgGiLbdZHPiPhVM+z4lc9j1M6XoJH7UUcb6z8iC9PG5SU52zENF66gzdKxH7ky7+F4YZysiWl4cQlHYzv3EbpjM2d+UE1DCLQVstcRqdIsqBVZwMmtqT7FTLgCPrMtc8ZTkvZeYksbyifIKZ6ToI6mE2u7tXsmaPuCZXBqIokdey7YTE6xdautrTucTqSPLcVGeoLShrZCVesHY/r2S3MCmdjPdxqlaTqOlAZRo8dbCrFWewCFMyWZYuDSdDNimHK3zZ5Xm5GCqQ50qlsMIIG/DCCBOSgAwIBAgIQbVIYcIfoI02FYADQgI+TVjANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNvbSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFJTQTAeFw0xOTExMTMxODUwMDVaFw0zNDExMTIxODUwMDVaMHMxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjERMA8GA1UECgwIU1NMIENvcnAxLzAtBgNVBAMMJlNTTC5jb20gVGltZXN0YW1waW5nIElzc3VpbmcgUlNBIENBIFIxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArlEQE9L5PCCgIIXeyVAcZMnh/cXpNP8KfzFI6HJaxV6oYf3xh/dRXPu35tDBwhOwPsJjoqgY/Tg6yQGBqt65t94wpx0rAgTVgEGMqGri6vCI6rEtSZVy9vagzTDHcGfFDc0Eu71mTAyeNCUhjaYTBkyANqp9m6IRrYEXOKdd/eREsqVDmhryd7dBTS9wbipm+mHLTHEFBdrKqKDM3fPYdBOro3bwQ6OmcDZ1qMY+2Jn1o0l4N9wORrmPcpuEGTOThFYKPHm8/wfoMocgizTYYeDG/+MbwkwjFZjWKwb4hoHT2WK8pvGW/OE0Apkrl9CZSy2ulitWjuqpcCEm2/W1RofOunpCm5Qv10T9tIALtQo73GHIlIDU6xhYPH/ACYEDzgnNfwgnWiUmMISaUnYXijp0IBEoDZmGT4RTguiCmjAFF5OVNbY03BQoBb7wK17SuGswFlDjtWN33ZXSAS+i45My1AmCTZBV6obAVXDzLgdJ1A1ryyXz4prLYyfJReEuhAsVp5VouzhJVcE57dRrUanmPcnb7xi57VPhXnCuw26hw1Hd+ulK3jJEgbc3rwHPWqqGT541TI7xaldaWDo85k4lR2bQHPNGwHxXuSy3yczyOg57TcqqG6cE3r0KR6jwzfaqjTvN695GsPAPY/h2YksNgF+XBnUD9JBtL4c34AcCAwEAAaOCAYEwggF9MBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0jBBgwFoAU3QQJB6L1en1SUxKSle44gCUNplkwgYMGCCsGAQUFBwEBBHcwdTBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5zc2wuY29tL3JlcG9zaXRvcnkvU1NMY29tUm9vdENlcnRpZmljYXRpb25BdXRob3JpdHlSU0EuY3J0MCAGCCsGAQUFBzABhhRodHRwOi8vb2NzcHMuc3NsLmNvbTA/BgNVHSAEODA2MDQGBFUdIAAwLDAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cuc3NsLmNvbS9yZXBvc2l0b3J5MBMGA1UdJQQMMAoGCCsGAQUFBwMIMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmxzLnNzbC5jb20vc3NsLmNvbS1yc2EtUm9vdENBLmNybDAdBgNVHQ4EFgQUDJ0QJY6apxuZh0PPCH7hvYGQ9M8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQCSGXUNplpCzxkH2fL8lPrAm/AV6USWWi9xM91Q5RN7mZN3D8T7cm1Xy7qmnItFukgdtiUzLbQokDJyFTrF1pyLgGw/2hU3FJEywSN8crPsBGo812lyWFgAg0uOwUYw7WJQ1teICycX/Fug0KB94xwxhsvJBiRTpQyhu/2Kyu1Bnx7QQBA1XupcmfhbQrK5O3Q/yIi//kN0OkhQEiS0NlyPPYoRboHWC++wogzV6yNjBbKUBrMFxABqR7mkA0x1Kfy3Ud08qyLC5Z86C7JFBrMBfyhfPpKVlIiiTQuKz1rTa8ZW12ERoHRHcfEjI1EwwpZXXK5J5RcW6h7FZq/cZE9kLRZhvnRKtb+X7CCtLx2h61ozDJmifYvuKhiUg9LLWH0Or9D3XU+xKRsRnfOuwHWuhWch8G7kEmnTG9CtD9Dgtq+68KgVHtAWjKk2ui1s1iLYAYxnDm13jMZm0KpRM9mLQHBK5Gb4dFgAQwxOFPBslf99hXWgLyYE33vTIi9p0gYqGHv4OZh1ElgGsvyKdUUJkAr5hfbDX6pYScJI8v9VNYm1JEyFAV9x4MpskL6kE2Sy8rOqS9rQnVnIyPWLi8N9K4GZvPit/Oy+8nFL6q5kN2SZbox5d69YYFe+rN1sDD4CpNWwBBTI/q0V4pkgvhL99IV2XasjHZf4peSrHdL4RjGCAlgwggJUAgEBMIGHMHMxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjERMA8GA1UECgwIU1NMIENvcnAxLzAtBgNVBAMMJlNTTC5jb20gVGltZXN0YW1waW5nIElzc3VpbmcgUlNBIENBIFIxAhAfaxZi0i4bbF3xwMGgYA44MAsGCWCGSAFlAwQCAaCCAWEwGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMBwGCSqGSIb3DQEJBTEPFw0yNjA3MTMwMDA1MjBaMCgGCSqGSIb3DQEJNDEbMBkwCwYJYIZIAWUDBAIBoQoGCCqGSM49BAMCMC8GCSqGSIb3DQEJBDEiBCCpo4sREbjv+wamUYFfWE+KXgpo5gTi5gkMQviFvN8kyzCByQYLKoZIhvcNAQkQAi8xgbkwgbYwgbMwgbAEIFQq+aFqjXIuZhFJeIrplMGKmq7lplyzRKJUmvlseceLMIGLMHekdTBzMQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24xETAPBgNVBAoMCFNTTCBDb3JwMS8wLQYDVQQDDCZTU0wuY29tIFRpbWVzdGFtcGluZyBJc3N1aW5nIFJTQSBDQSBSMQIQH2sWYtIuG2xd8cDBoGAOODAKBggqhkjOPQQDAgRHMEUCIQCo8UMWqeTJjQmHSaB+yq4wyOprwTT9sM4FUfmC0Y00DwIgIIqOuMTElheoSj2QH+f9GMhyBrD7uE2oEkNskptZL98=",
"note": "Second, independent timestamp anchor over the SAME fingerprint as the primary anchor, from an unrelated authority. Verify it exactly like the primary; each anchor stands on its own.",
"verify_instructions": "Same procedure as the primary anchor: decode token_der_base64 to token2.tsr, write the exact event_hash string to a file (no trailing newline), then: openssl ts -verify -data <event_hash-file> -in token2.tsr -CAfile <this-authority's-current-root.pem>. Use the CURRENT root certificate published by THIS anchor's authority."
},
"verification": {
"intact": true,
"components": {
"normalized_payload": true,
"analysis": true,
"evidence_window": true,
"composite": true
},
"recomputed_event_hash": "4f20258a6609fb6ea7fad767af7a0c8a1649b33f9aa7702fa00e4b507c1b72e0",
"stored_event_hash": "4f20258a6609fb6ea7fad767af7a0c8a1649b33f9aa7702fa00e4b507c1b72e0",
"signature_status": "cloud_signed",
"signature_valid": true,
"checked_at": "2026-07-13T00:05:19.833422"
}
}