INTACT

statement_signed.pdf

statement 1 page(s) PDF evidence score 0.05 (not a probability) sha256 4f66fc9f24a6de31…

No evidence of tampering was found by the checks that ran.

Where

page 1

#1 low TL-META-004 Producer changed between revisions whole file · revision 2 · structure · confidence 0.50

Revision 1 was written by 'ReportLab PDF Library - (opensource)' and revision 2 by 'ReportLab PDF Library - (opensource); pyHanko 0.37.0'.

Evidence

{
  "after": "ReportLab PDF Library - (opensource); pyHanko 0.37.0",
  "before": "ReportLab PDF Library - (opensource)"
}

#2 info TL-REV-001 Document has incremental updates whole file · structure · confidence 0.95

The file contains 2 revisions: it was saved 1 more time(s) after it was first written.

Evidence

{
  "linearized": false,
  "revisions": 2
}

#3 info TL-SIG-001 Signed and unmodified since signing whole file · structure · confidence 0.90

Signature 'IssuerSignature' is intact and nothing was changed after signing. (The signer's identity was not checked against a trust list.)

Evidence

{
  "coverage": "ENTIRE_FILE",
  "docmdp_ok": true,
  "field": "IssuerSignature",
  "modification_level": "NONE"
}

Detector	Layer	Status	Findings / reason
signatures	structure	ran	1
revisions	structure	ran	1
metadata	structure	ran	1
edit-markers	content	ran	0
fonts	content	ran	0
overlays	content	ran	0
alignment	geometry	ran	0
statement-logic	logic	ran	0
invoice-logic	logic	skipped	document type is statement, not an invoice
identifiers	logic	ran	0
jpeg-grid	image	skipped	no raster images to analyse
copy-move	image	skipped	no raster images to analyse

Findings are evidence for a human reviewer, not proof of fraud.
A document rebuilt from scratch in the issuer's own software leaves few structural traces.
Edits made before the PDF was generated (for example in a spreadsheet) cannot be detected from the file structure.

Generated by tamperlint 0.1.0.dev0 on 2026-09-28 06:47 UTC. Report schema 1.0. Findings are evidence for a human reviewer, not proof of fraud.