No
sign-in required
The future public verifier is meant for signers, schools, regulators, and third parties without requiring an Otto account.
Public document verification
Verify a signed document without exposing the record.
Otto public verification checks a certificate number or a signed PDF hash against the sealed record. This page is still a controlled preview: real uploads, production lookup, support routing, and retention enforcement are not connected.
2
verification paths
A verifier can use a certificate number or compare a signed PDF hash with Otto's sealed record.
3
result states
Valid, Changed, and Not found cover the public-safe outcomes without exposing raw audit details.
Full
retention window
Verification must remain available for the school's full document-retention period, even after school departure.
What it checks
Certificate, hash, metadata, retention.
The public verifier is narrow by design: enough to prove integrity without exposing private records.
Certificate number
The public number printed on the certificate should find the sealed record and return public metadata.
Useful when a signer, employer, auditor, or regulator has the certificate page.
Document hash
A completed PDF should match the stored SHA-256 hash; changing one character should fail verification.
Useful when the verifier has the PDF and wants to know whether the file changed.
Public metadata
A valid result shows document title, school, completion date, certificate number, verification code, and signer initials only.
Useful for confirming the document without exposing private signer records or the raw audit trail.
Retention and export
Each school export includes the certificate data needed to keep verification available for the retention period.
Useful for continuity if a school later leaves Otto or needs audit package evidence.
Verification input
Certificate lookup and PDF upload are modeled
The control is visible for review, but this ticket does not accept real files, parse PDFs, or store uploaded documents.
Certificate number found
Valid
Entering the sample certificate number returns public-safe document metadata and signer initials.
The entered certificate or document hash matches Otto's sealed-document record.
- Document
- CA BPPE enrollment agreement - Luis Ortega
- School
- Otto Fixture BPPE Career School
- Completed
- 2026-10-20T19:06:00Z
- Certificate
- OTTO-CA-2026-EA-000184
- Verification code
- OTTO-VERIFY-CA-EA-000184
- Signers
- Student: LOGuardian: MOAdmissions representative: APSchool director: SD
Uploaded PDF hash matches
Valid
A PDF whose SHA-256 hash matches the sealed record should show Valid.
The entered certificate or document hash matches Otto's sealed-document record.
- Document
- CA BPPE enrollment agreement - Luis Ortega
- School
- Otto Fixture BPPE Career School
- Completed
- 2026-10-20T19:06:00Z
- Certificate
- OTTO-CA-2026-EA-000184
- Verification code
- OTTO-VERIFY-CA-EA-000184
- Signers
- Student: LOGuardian: MOAdmissions representative: APSchool director: SD
One-character change fails
Changed
Changing one character in the hash creates the Changed state required by the QA plan.
The document hash does not match Otto's sealed-document record, so the proof treats the PDF as changed.
- Stored hash
- 0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
- Compared hash
- 0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdee
Retention and export
Verification survives school departure
- Retention
- Full school document-retention period
- Departure coverage
- Verification remains available even if the school later leaves Otto.
- Export
- School export includes every certificate number, public verification code, document hash, signer initials, and completion date.
Public boundary
No sign-in, no private audit details
Requires sign-in
NoStores upload
NoProduction DB lookup
NoRaw audit trail
HiddenResults
What each result means.
Each state is intentionally limited so public verification confirms integrity without becoming a private record portal.
Valid
The certificate number or document hash matches the sealed record, so public-safe metadata and signer initials can be shown.
Changed
The compared hash does not match the sealed record. The verifier should treat the PDF as changed and avoid showing signer metadata.
Not found
The certificate number does not match a public proof record. The verifier should reveal no private document metadata.
Ticket 044 boundary
Production verification remains disabled
Real PDF upload handling or PDF byte parsing
Production SHA-256 calculation in the browser or server
Production sealed-document database lookup
Uploaded PDF retention, raw audit-trail exposure, or private signer details
Support ticket creation, school export generation, or retention-policy enforcement
Cryptographic PDF signature validation, Adobe trust-list status, PAdES, or trusted timestamp validation