{"vendor":{"slug":"letterstory","name":"Letterstory","domain":"app.letterstory.com","category":"software"},"summary":{"attested_customers":1,"attested_unnamed":0,"unverified_customers":69,"features_proven":[],"sessions_30d":1,"last_attested":"2026-10-04T13:04:56.434Z","tier":4,"companies_observed":70},"customers":[{"vendor":"letterstory","customer":"casey-millstein","customer_name":"Casey Millstein","customer_domain":"caseymillstein.com","verified":true,"tier":4,"since":"2026-10-03","features":[],"sessions_30d":1,"seats_active":0,"observed_through":"2026-10-04T13:04:56.434Z","published_at":"2026-10-04T13:04:56.434Z","ttl":3600,"method":"https://github.com/letterstory/Letterprove/blob/b028653e72168d2cd3ec3d4751d0fd67154d200b/src/lib/attest/proofs.ts","prev_hash":"41427ccbf2cfeb3841feab1dc4ac397850dd8e361fda9c2d46b9b63e85b4fd7d","key_id":"lp-d157ef400e","signature":"EkxldZbQsEyy8peoQLVIThMZaroxTNBCBJhd2ld1Bn9368EmiAQz060weSIHEc17m87EO8OsjQObqf-5eiAyAg"}],"tiers":{"note":"Every attestation carries a `tier`. A valid signature proves only that this document is ours and unaltered — it says nothing about how good the underlying evidence is. The tier says that, and it is the claim. A signed tier-0 document asserts only that the vendor said so.","levels":[{"tier":0,"name":"vendor-asserted","means":"The vendor stated this. Nothing corroborates it — either no usage was observed, or the vendor has not proven control of the domain events are pinned to.","forgeable_by":"The vendor alone, trivially. Treat as a claim, not as evidence."},{"tier":1,"name":"script-observed","means":"Letterprove's script reported usage attributable to this company's email domain.","forgeable_by":"The vendor, with effort. The collector pins events to a verified origin, which a browser cannot forge — but a non-browser client can send whatever origin it likes."},{"tier":2,"name":"infrastructure-bound","means":"Observed usage carrying a Letterprove-side receipt timestamp and an origin pinned to a domain the vendor proved control of by DNS.","forgeable_by":"A determined vendor running a distributed spoofing rig. Volume and burst anomalies are scored against it; a slow, well-distributed rig is an accepted open gap."},{"tier":3,"name":"third-party confirmed","means":"An invoice that actually settled for this company, read directly from the vendor's own live-mode Stripe account, alongside observed usage. A subscription on its own does not qualify: it says what the vendor meant to bill, and a free one reaches `active` for nothing.","forgeable_by":"A vendor willing to pay themselves. Every condition is checked against a third party's ledger rather than the vendor's word, and money has to genuinely move through a processor in a Stripe-verified live account — but a vendor prepared to spend real money on a lie can still reach it. Read this as corroboration, not as immunity."},{"tier":4,"name":"customer counter-signed","means":"The customer reviewed this exact usage summary and approved it, at a link delivered to an address on their own domain. The vendor never held that link.","forgeable_by":"Nobody, without control of a mailbox at the customer's own domain. A vendor who registers a domain and invents a company on it controls both ends — fraud scoring, not this tier, is the backstop for that."}]}}