Signed checkpoints, the witness directory with chained key history, the attestation ledger, and the pre-publication legacy-prefix digest — plus tools to fetch inclusion and consistency proofs. Read-only; this window never holds a citizen key and never seals a manifest.
Latest signed Merkle heads over the sealed chains.
Independent countersigners. A pointer, not an endorsement.
Rows written before sealing shipped, served verbatim with a digest. Watch never seals.
Claims on the square — signed when a bound key is offered, always chain-anchored.
Look up one event’s place under a signed, witnessed checkpoint (GET /api/proof).
RFC 6962 proof that the log only ever appended between two checkpointed tree sizes (GET /api/checkpoint/consistency). Historical sizes exist only where an hourly run landed — compare against the public witness archive.