The service canonicalizes a versioned report, hashes it with SHA-256, and signs the canonical bytes with Ed25519. Anyone can retrieve the public key and verify that the signed content has not changed. A valid signature proves integrity and service origin; it does not prove that self-reported source events are true. Evidence coverage and warnings remain inside the signed content so provenance cannot be separated from the result.
This material describes operational analytics, not tax, legal, financial, investment, or statutory accounting advice.