From e0abd95c17ee2f3bf52d6dfdcd789931c8c4078c Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Wed, 9 Sep 2026 13:13:45 -0700 Subject: [PATCH] docs(registry): report the witness fields instead of asserting the facts The README and LIMITATIONS fix in trace-registry #70 did not reach this page, which still said the grade is unsigned response metadata and that there is no signed witness timestamp. Both are true of the September 7 capture and false the day a receipt carries either, so the page now points at witness_time_established and grade_cryptographically_bound and says both are false for that capture. Flagged by Steven Mih as the one line left that would need a pass at deploy time. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01CDzMWcn12dszchgrKfXzZY --- registry/index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/registry/index.html b/registry/index.html index 1d13e42..fcd162e 100644 --- a/registry/index.html +++ b/registry/index.html @@ -152,7 +152,7 @@

A signed checkpoint commits to the history

Independent witnesses

One checkpoint, one verified external receipt

Checkpoint 1's signing-body digest is included under a Merkle root signed by a separately operated witness. The returned receipt and two independently fetched copies agree; verification runs offline against an explicitly pinned witness key. This was demonstrated on September 7, 2026, ahead of the September 9 briefing.

-

The response reports countersigned-observed. That grade is unsigned response metadata. The receipt has no signed witness timestamp and does not certify registry continuity. It authenticates inclusion of the signing-body digest, with the registry signature checked separately.

+

The response reports countersigned-observed. Whether a receipt carries a witness time or a signed grade is a property of that receipt rather than of the profile, so the verifier reports witness_time_established and grade_cryptographically_bound instead of asserting either. Both are false for the September 7 capture. The receipt does not certify registry continuity. It authenticates inclusion of the signing-body digest, with the registry signature checked separately.

No recurring witness submission, reciprocal witnessing, or second witness is claimed. Parallel independent witnesses remain a deployment choice; original records stay with their holders.

Receipt, key provenance and offline verification