Check a record against a public log
Give a record digest, or paste a proof you were sent. The check needs this registry's log key, and for each witness its keys: the anchor key and the Rekor shard's checkpoint key, and the pinned root of the timestamp authority. All are listed at /v1/transparency.
Once an hour, when the log grew, the newest checkpoint this registry signs goes to two outside witnesses it does not run: a public Rekor v2 log, and an RFC 3161 timestamp authority (DigiCert). witnessed says which checkpoint each one covered and whether the quorum is met. A record checks when it is in a witnessed checkpoint signed by the log key and every witness present checks: that exact checkpoint is an entry in Rekor signed by the anchor key and included under Rekor's signed checkpoint, and the timestamp token names that checkpoint's sha256 and chains to the pinned TSA root. The quorum is two witnesses. The witnesses cover checkpoints, not the daily root: the daily root at /v1/roots/{day} carries its own RFC 3161 timestamps and an OpenTimestamps proof, and no Rekor entry.
The record
$ curl -H 'Accept: application/json' https://aisourceoftruth.com/verify/transparency # this page is a rendering of the API. Reproduce it as data.