Verify records

What a pass means

• Every record is signed with a key this service publishes.
• No record's content was changed after it was sealed.
• No record is missing from the middle of a chain.
• No record was removed from the end: the newest record matches the signed checkpoint in the file.
• Where the file carries anchors, the timestamp authority's reply is over the anchored checkpoint, and every chain still holds the records it saw.

What it does not mean

This service holds the signing key, so a signature alone shows that nobody else altered the records, not that the service never reissued them. An anchor closes that gap up to its time: the checkpoint was timestamped by an outside authority (DigiCert), so the history it covers cannot have been reissued since without this check failing. Records sealed after the newest anchor rest on the signature alone. A pass also says nothing about whether what was sealed was right; that is for the auditor.