Out of band, on purpose

Which version is in force, and how to tell.

The Witness Practice Statement says what the witness signs, what it refuses to sign, what it can see, and who is behind it. It is what a cosignature means, written down, so that a customer or a court can decide whether one is worth anything.

A statement of practice that could be quietly rewritten would be worth nothing. So each version is dated, names the SHA-256 of the version it replaces, and is hashed over the file with line endings normalised — a Windows checkout and a Linux checkout agree about what the text is.

In force now

version7
dated2026-09-18
sha-25637e9b2c9f8762054a9424661078f92117f17e32cbf867c57582efaa298a850d6
replaces583a23e551ef9dca1d920d2f8f3a12b0702f5d8b84e18b4c6c574bb1c8e2d967

Check a copy you were sent:

# line endings normalised to LF first, as the statement's own §0 defines the hash
tr -d '\r' < witness-practice-statement.md | sha256sum

If that does not match the figure above, the copy you hold is not the text in force — and the point of publishing the figure here is that we are not the ones who told you it matched.

Getting the text

Write to hello@tallwright.com and it is sent. Check it against the hash above rather than against our word for it.

One thing the statement says that is worth knowing before you read it: the witness is operated by David Jöbstl, Austria, who operates the rest of this product too. Tallwright is the brand and the name of the service, not a company, and there is no separate witness company. What that does and does not buy you is set out in the statement itself, because an exhibit whose operator and whose cosigner are one person, or under one person’s control, must never be presented as a demonstration of organizational separation.