Documentation · Privacy and receipts
Timestamp receipts: proof and limits
The signed receipt binds a manifest digest, ordered evidence digest set, server time, key identifier and signature. Cached public keys can support offline verification.
Verify signature, manifest match and key ID as separate results.
Treat unknown key, invalid signature and digest mismatch as distinct failures.
Describe the time as receipt time—not capture time or legal certification.