Report the witness fields on the registry page instead of asserting the facts

registry/index.html

@@ -152,7 +152,7 @@ <h3>A signed checkpoint commits to the history</h3>
   <span class="label">Independent witnesses</span>
   <h2>One checkpoint, one verified external receipt</h2>
   <p>Checkpoint 1's signing-body digest is included under a Merkle root signed by a separately operated witness. The returned receipt and two independently fetched copies agree; verification runs offline against an explicitly pinned witness key. This was demonstrated on September 7, 2026, ahead of the September 9 briefing.</p>
-  <p>The response reports <code>countersigned-observed</code>. That grade is unsigned response metadata. The receipt has no signed witness timestamp and does not certify registry continuity. It authenticates inclusion of the signing-body digest, with the registry signature checked separately.</p>
+  <p>The response reports <code>countersigned-observed</code>. Whether a receipt carries a witness time or a signed grade is a property of that receipt rather than of the profile, so the verifier reports <code>witness_time_established</code> and <code>grade_cryptographically_bound</code> instead of asserting either. Both are false for the September 7 capture. The receipt does not certify registry continuity. It authenticates inclusion of the signing-body digest, with the registry signature checked separately.</p>
   <p>No recurring witness submission, reciprocal witnessing, or second witness is claimed. Parallel independent witnesses remain a deployment choice; original records stay with their holders.</p>
   <a class="button" href="https://github.com/agentrust-io/trace-registry/tree/main/docs/evidence/witness-2026-09-07">Receipt, key provenance and offline verification</a>
 </section>