REST API
Certificate
Public certificate data. No key required once published.
GET
/api/v1/certificates/{partner}Returns every dimension, reported or not, the date of the last daily update and the checksum of that day’s snapshot.
GET
/api/v1/certificates/{partner}/canonicalThe exact bytes the checksum is a digest of. Served verbatim rather than rebuilt, so a verifier hashes what was hashed rather than trusting a second serialiser to agree.
Withheld dimensions are inside that document, with their counts and without their figures. That is what makes "a partner cannot pick which readings appear" checkable: dropping one changes the digest.