Off by default (404 unless OBELISK_SEAL_ATTESTATION=on). When on: the seal-state log, newest first — one row each time what the seal says about a registration changes (first recorded, registered, state, sign-in addresses, details, removed), each naming the receipt whose Merkle inclusion proof /api/proof/:hash returns. Rows come only from the service's start-up registry comparison and owners' signed-in changes.