Portable Log evidence

Supply a fingerprint you already trust to the independent verifier:
  node verify.mjs archive.tar --fingerprint YOUR_TRUSTED_FINGERPRINT

This bundle does not establish who owns its included key. Its index hashes detect damage, not authorship. PGP signatures and the signed publication chain authenticate revisions. Legacy revisions may lack signed media coverage. Read each signed proof statement for original media path/hash mappings. WebP variants and external URLs are outside original-media byte coverage.

For manual inspection, extract only after checking archive paths. Verify Markdown: gpg --verify revisions/ID-vN.md.asc revisions/ID-vN.md
Verify a v2 statement: gpg --verify proofs/ID-vN.json.asc proofs/ID-vN.json
OTS for v2 binds the .json.asc file: ots verify proofs/ID-vN.json.asc.ots
An offline receipt binding is not Bitcoin confirmation. Old .md.ots receipts cover Markdown only.
