A public page where anyone can check whether a record, letter or appointment bearing the office's name is genuine, by checking its fingerprint. A forged document cannot produce a matching hash.
It is live, and here is a working record
Every delivery record is sealed when it is captured. Checking one recomputes the fingerprint and compares it. If a single character changed after sealing, the check fails.
Try a real sealed record: reference GBJ-261101-00001, Ward 8, one electric tricycle, chain position 1 of 243. It comes back HASH MATCHES - record is intact.
Seals each record on capture, chaining each entry to the one before it, so removing or editing one record breaks the chain visibly.
Published hashes, never published personal data. A hash proves a record exists and is unaltered without exposing a name, a phone number or a household.
Signed documents resolve to a certificate carrying the signer, the consent version, the seal, the audit trail and the company stamp.
Anyone the office nominates can check a record from a phone, with no account.
What we would need from the office
The known-good set: a few signed reference documents whose fingerprints can be published as the standard to compare against.
A named officer who answers a failed check, and the remedy when one fails.
Confirmation, in writing, that publishing fingerprints rather than documents is acceptable.