Zero-Network Verification Architecture

Making Sense of a Federated Notary Journal Export

Enterprise title, settlement, and loan closing platforms partner with NotaryCentral to produce legally defensible, state-compliant notary journal records without exposing sensitive signer Personally Identifiable Information (PII) to NotaryCentral itself. Here is how to interpret, verify, and audit every byte of the resulting export.

How is the custody boundary configured? Learn how workspace admins manage PII custodians, HTTPS origins, and order lookup URL templates.
Read Settings Breakdown

Zero PII in the Cloud

Signer names, addresses, and ID numbers never touch NotaryCentral cloud servers. The partner retains the raw PII along with a 32-byte cryptographically random salt.

Offline Root Attestation

NotaryCentral issues an RSA-256 JSON Web Signature (JWS) certifying non-PII metadata, document hashes, and the salted PII commitment under a pinned offline trust root.

Local Browser Merging

At audit time, the auditor loads the receipt and PII snapshot into an isolated browser tab. The verifier proves the hash matches and renders state journal entries in browser memory.

Download Authentic Sample Export Artifacts

These authentic sample files were generated and certified during our live end-to-end verifier test runs.

Test Vector: order_X9y8z7 (Pennsylvania PA)

Verified Journal PDF

561 KB

Complete 3-page Pennsylvania journal export with cryptographic verification cover, participant PII, credential analysis, and receipt linkage.

Filename: verified-journal.pdf · PDF Document

Verified Relational CSV

1.3 KB

Spreadsheet-safe relational export linking signers to documents with formula injection mitigation (escaped formulas) and credential numbers.

Filename: verified-journal-export.csv · UTF-8 CSV

Full Audit ZIP Package

570 KB

Self-contained multi-file package with aggregate CSV, per-record PDF and CSV, and a verification manifest containing SHA-256 digests.

Filename: verified-journal-audit-package.zip · ZIP Archive

Cryptographic Verification Report

4.6 KB

Machine-readable audit record detailing the pass/fail evaluation across all 18 cryptographic invariants and root certificate signatures.

Filename: verification-report.json · JSON Data

Raw Evidence & PII Bundle

7.1 KB

Complete input payload containing the signed receipt, certified key manifest, 32-byte salt, and PII snapshot for independent verification.

Filename: evidence-bundle.json · JSON Bundle
Interactive Audit Inspection

Explore the Real Pennsylvania Audit Export

Download PDF (561 KB)
Page 1 of 3

Page 1: Cryptographic Verification Cover

Root-Anchored Attestation & 18 Independent Verification Checks

Every generated journal audit export begins with an immutable, machine-verifiable cover sheet. It proves that the receipt was issued by a certified key from NotaryCentral's pinned offline root and that all 18 cryptographic invariants passed without error.

Key Invariants On This Page

Offline Trust RootPinned demo root ncj-demo-root-2026-01

The verifier verifies the key manifest against a hardcoded public key, rejecting any external server certificate overrides.

Cryptographic Receipt ID87f5e1d2-f8b3-4afd-b53d-4b8289b8c67e

Universal identifier permanently tying this export to the non-PII attestation receipt stored in NotaryCentral.

Privacy BoundaryZero-network client evaluation

Rendered locally in browser memory. NotaryCentral never receives or stores the underlying signer PII.

18 Cryptographic Checks Passing·Layout: Pennsylvania RULONA

Direct rasterized rendering from the standalone browser verifier (Page 1 of 3).

Anatomy of the Export Files: What Each File Contains

Auditors and regulators receive a package of coordinated artifacts. Each file serves a specific legal and forensic purpose.

1. The Audit PDF (`verified-journal.pdf`)

The PDF is the human-readable compliance document presented to state notary authorities, underwriters, and courts.

  • Page 1 (Cover Sheet): Cryptographic attestation cover detailing the offline trust root, receipt ID, notarization timestamp, and full checklist of all 18 cryptographic invariants.
  • Page 2 (Jurisdiction Journal Entry): Formatted dynamically to match specific state notary statutes (e.g., Pennsylvania RULONA, Florida RON, Texas, or General). Includes signer names, addresses, ID credentials, and notarial act references.
  • Page 3 (Document & Receipt Linkage): Enumerates the signed documents (e.g., Deed of Trust, Note, Mortgage), page counts, signer links, and NotaryCentral’s frozen metadata digest.

2. The Relational CSV (`verified-journal-export.csv`)

Designed for automated ingestion into loan origination systems (LOS), data warehouses, and compliance spreadsheets.

  • Formula Injection Mitigation: To prevent CSV formula injection attacks in Excel and Google Sheets, any cell starting with dangerous characters (=, +, -, or @) is automatically prepended with a single quote (').
  • Unicode & Normalization: UTF-8 encoded with strict Unicode NFC normalization to preserve non-ASCII participant names (e.g., accents, umlauts).
  • Relational Structure: Denormalizes participant-document relationships so auditors can query which signer executed which specific instrument.

3. The Audit ZIP Package (`verified-journal-audit-package.zip`)

The definitive bulk or single-order forensic archive.

  • Folder Hierarchy: Stored under records/0001-.../journal.pdf and records/0001-.../journal.csv.
  • Verification Manifest: Includes verification-manifest.json containing the SHA-256 digest of every file inside the archive, guaranteeing that files cannot be swapped or tampered with post-export.

Understanding the 18 Cryptographic Checks

The standalone verifier executes 18 mandatory checks before unlocking export generation. If even a single check fails, the export gate remains locked.

1. Root Trust & Key Certification

Pinned NotaryCentral trust root
Verifies the key manifest against hardcoded public key ncj-demo-root-2026-01. Never accepts attacker-supplied root keys.
Exact key manifest payload
Requires the decoded manifest payload bytes to exactly equal the manifest_payload parameter.
Offline root signature
Proves that receipt signing keys were certified by NotaryCentral's offline root authority.
Canonical key manifest
Enforces lexicographically sorted keys and strict ncj-receipt-key-manifest-v1 schema.
Key certification at receipt time
Confirms the receipt's issued_at timestamp falls within the validFrom/validUntil manifest window.
Certified receipt keys
Validates that the active signing key ID is officially listed inside the certified manifest JWKS.

2. Receipt Integrity & Metadata Binding

Evidence structure
Ensures all non-PII evidence parameters (receipt ID, timestamps, digests) match the protocol specification.
Protected JWS header
Validates alg=RS256, typ=notarycentral-journal-receipt+jws, and kid=demo-journal-key-1.
Exact signed payload
Guarantees the decoded JWS bytes exactly equal the receipt_payload string without re-encoding.
NotaryCentral signature
Verifies the cryptographic RSA-256 signature using the certified public key.
Canonical receipt payload
Requires strict canonical UTF-8 JSON matching the exact byte representation stored in the database.
Receipt claims match evidence
Validates that every signed claim in the JWS matches the corresponding evidence field.
Frozen metadata digest
Recomputes lowercase hex SHA-256 over 'NCJ-METADATA\0V1\0' + canonical appointment metadata.
Protocol versions and state
Confirms protocol NCJ-FEDERATED-1 and terminal state COMPLETE.

3. Zero-Network PII Commitment & History

PII snapshot bound to journal
Asserts that journalEntryId, journalVersion, and metadataDigest inside the PII snapshot agree with the receipt.
Historical PII commitment
Reproduces the exact SHA-256 hash over 'NCJ-PII-COMMITMENT\0V2\0' + 32-byte salt + exact snapshot UTF-8 bytes.
PII snapshot schema and references
Strictly validates participant/document refs, dates, and Unicode NFC normalization.
Complete receipt history
Validates continuous version sequencing (1, 2, 3...) and verifies each version's previousReceiptId link.

How to Independently Verify on Your Own Machine

You do not need to take NotaryCentral’s word for it. The verification protocol is open source and designed to run entirely offline or in an air-gapped environment.

# 1. Download the evidence bundle and verification tool

curl -O https://www.notarycentral.org/downloads/federated-journal/evidence-bundle.json

# 2. Run the offline zero-network verifier locally

git clone https://github.com/notarycentral/notarycentral-journal-verifier.git

cd notarycentral-journal-verifier && npm install && npm run build && npx serve out

# 3. Paste evidence-bundle.json into the browser tab at http://localhost:3000

# All 18 checks evaluate client-side with zero server calls!