Filing Integrity Certificate
A signed record of what QiXCite checked before filing, with offline verification and explicit coverage limits.
What the certificate proves
The certificate records the checks completed for a document at a specific time. It is signed with the existing IOA Ed25519 evidence key and can be checked locally with ioa verify.
The certificate contains the document SHA-256 hash, never the document text or file content. A recipient can therefore verify the record without receiving the filing itself.
What is included
- Certificate and bundle identifiers.
- Document hash only.
- Each citation, its verdict, provider, source link, and review note where available.
- Unresolved or unavailable citations, shown prominently for review.
- Jurisdictions, courts, and citation types checked.
- Jurisdictions, courts, and citation types not checked.
- Software version, policy version, timestamp, and acknowledgement line.
A certificate proves that the recorded check ran. It does not replace professional judgment or guarantee that a filing is correct.
Verify offline
Download the public verification key from the permanent QiXCite registry path, then keep the key and certificate together.
curl -o qixcite-pubkey.pem https://orchintel.com/.well-known/qixcite-pubkey.pem
ioa verify certificate.json qixcite-pubkey.pemThe verification command does not contact OrchIntel. It returns a failure when the certificate signature or signed fields have been changed.
Public-key registry
QiXCite publishes a registry rather than relying on one permanent key. Each entry maps a public_key_id to its public key and validity period. Retired public keys remain listed so earlier certificates continue to verify after rotation.
The permanent registry address is /.well-known/qixcite-key-registry.json. The current key is 8d6b0d9d711903a4, valid for issuance from 2026-07-30 through 2028-07-30. The registry is also available from the QiXCite service endpoint. The private signing key is never published.
During rotation, the operator adds the new public entry, marks it current, keeps the previous entry, deploys, and verifies both a new certificate and an older certificate. A retired entry is not removed while its certificates may still be needed.
Unknown means review required
QiXCite does not turn an outage, an unconfigured provider, an ambiguous match, or an unsupported jurisdiction into a positive result. These citations remain visible as Unknown or Unavailable on the certificate.
The certificate also states what was not checked. Australian case law, for example, is recorded as not checked unless an approved source and provider check is explicitly included.