Public Witness
A privacy-redacted, newest-first receipt suffix. The server verifies full receipt-v1 bundles before constructing this suffix. This browser independently verifies Ed25519 over each disclosed receipt_hash and the complete key fingerprint; its disclosed chain_seq order and prev_hash equality checks are structural, not cryptographically authenticated after core redaction.
The server verifies each full receipt-v1 bundle before constructing the redacted suffix. This browser cryptographically verifies each disclosed receipt_hash signature and the complete SPKI SHA-256 key fingerprint. It separately compares disclosed chain_seq order and prev_hash equality as structural checks.
The full signed core is withheld, so this browser cannot recompute receipt_hash or cryptographically authenticate disclosed contract_version, chain_seq, or prev_hash. This surface also cannot prove ledger membership, TSA or freshness properties, or deployed private-key/public-key pairing.
PAI-009 remains Unverified at Implemented maturity. Passing local envelope checks does not promote the claim. The authenticated detailed explorer remains at /ledger.