Authentication

Every entry in the record carries three things, and they are all that is needed. The issuing authority, named in full. The identifier the authority itself uses — a docket number, an RN number, a permit or project number, whatever that authority assigns. And the date the record bears, which is the date on the record and not the date it was read. Take those three to the authority’s own register and compare.

The three steps, in order:

1. 1 Read the authority, the identifier and the date off the entry.
2. 2 Open the authority’s own published register — the source is linked from the entry, and it is the authority’s surface, not this site’s.
3. 3 Search that register for the identifier and compare it line for line with the entry as carried here.

A Worked Example

This is a record carried in the edition of September 1, 2026, quoted as it stands:

City of Avery public water system

Enforcement order approved for public drinking water violations; administrative penalty $765, of which $153 deferred. Docket 2026-0286-PWS-E.

Authority: Texas Commission on Environmental Quality. Date borne: 2026-08-11. Attribution: County not stated in the record (City of Avery).

The identifier is the docket number stated in the record itself. The authority publishes its enforcement orders in the In Addition section of the weekly issue of the Texas Register, and the entry links to the exact issue it was taken from:

https://www.sos.state.tx.us/texreg/archive/August212026/In%20Addition/In%20Addition.html

Open that issue, find the docket number, and read the authority’s own sentence. The penalty figure, the deferral, the respondent and the date should be the authority’s, because they are the authority’s: the entry restates a public order and adds nothing to it. If any element differs, that is a correction, and it is worth reporting.

The citation for that same record, as the record states it:

Texas Commission on Environmental Quality, enforcement record, 2026-08-11 — as recorded in Oquendo & Company, Texas Infrastructure Ledger, Edition September 1, 2026.

Checking one record proves one record. The harder question — the one a hostile reader should ask — is whether the records carried here are all the records there were. That check is made not against this list but against the authority’s own enumeration: the set of publications the authority itself says it issued in the window.

For an authority that publishes on a fixed schedule, the enumeration is the schedule. The Texas Register publishes a weekly issue and its archive index lists them; the denominator is that list of issues, and coverage means every issue in the window was fetched and read, not that a search returned results. For an authority that publishes a dataset, the denominator is the dataset and its own stated currency date. For an authority that publishes on no schedule at all, there is no denominator, and that is disclosed rather than papered over.

Where the count taken differs from the count expected, the difference is enumerated by reason — issue reachable but carrying no in-window record; release genuinely absent from the authority’s index; dataset frozen at its own stamp; surface unreachable on a stated date. A delta with a reason attached is a disclosure. A delta without one would be an error. The first is published; the second is a defect.

The authorities in scope, their enumeration bases, and their present condition are set out on the Methodology. That page exists so that this check is made by a reader, not taken on assertion.

An edition seals on publication and does not change afterwards. The records it carries, the figures on its digest, the boundaries it discloses and the date it bears are fixed at sealing. Confirming that is a three-part check, and each part is addressable.

The permanent address. Every edition lives at one address formed from the month it bears — the edition of September 1, 2026 at /therecord?edition=2026-09, the edition of August 1, 2026 at /therecord?edition=2026-08. The address does not move. A designator with no edition behind it is answered on the page’s face, in those words, above the current edition; it is never silently substituted for the one cited. The edition designator and seal date at that address are fixed at sealing; figures elsewhere on the page are counted when the page is served and are labelled as such.

The dated spine. Each edition states its own date, its jurisdiction, its coverage window and its disclosed boundaries on its face. Those four are the edition’s own account of what it is. The Methodology states the edition standing.

The corrections register. A change to the published record can appear in exactly one place: the corrections register. It is append-only. The erroneous statement stays legible in the sealed edition where it was made, and the correction states what the record said, what it now says, why the earlier statement was wrong, and the range of citation dates affected. If a figure in a sealed edition differs from what a reader saw before and no correction names it, that is a defect; report it. The correction policy states how such a report is handled and how quickly.

An Extract issued to a client is not sent as an attachment, and no letter from Oquendo & Company says it was. The sealed document is served here, at one permanent address stated in the letter that issues it:

/authentication/<extract number>-<verification token>

The extract number is a citation — it is printed on the Extract’s face and it is meant to be quoted. The token beside it is the authority: it is minted at random when the document is sealed, it is held with that document and nowhere else, and it is what makes the address unguessable. Quote the number freely; treat the whole address as you would the Extract itself.

Nothing is signed into, because there is nothing to sign into: everything the Company owes a client arrives by letter. An address whose token does not match, and an extract number nobody has been issued, are answered identically, so the address discloses nothing about who has ordered what — and a number alone opens nothing at all.

The document served is the document that was stored at issue, byte for byte: the store is write-once and an Extract cannot be revised in place. A revision would be a new Extract under its own number, and a change to a published statement would appear in the corrections register like any other.

Every Extract also carries its own schedule of monitored dockets, the version of the rule that was applied to it, and the instant it was reviewed, so an Extract read a year later can be checked without reaching for this site at all.

The sections above authenticate a record against the authority that issued it. This one authenticates a document against the bytes Oquendo & Company sealed. They are different checks and neither substitutes for the other.

A document cannot state the digest of itself: adding the digest would change the bytes being digested, so anything printed on an Extract’s face claiming to be that Extract’s own digest is the digest of something else. The digest is held with the sealed object and stated by the document’s own verification address, under the header X-Instrument-Sha256.

Both values are required.

shasum -a 256 <the file you hold>

Every letter Oquendo & Company sends is sent from admin@oquendoandco.com, over a domain whose sending authority is published in its own DNS records. A letter that purports to come from this Company from any other address did not come from it, whatever it carries in its signature.

Two things this Company never does, in any letter, for any reason. It never asks for a password, a credential, or a code — there is no account to sign in to, so there is nothing a credential could open. And it never asks for payment by reply, by wire instruction, or to an address given in the body of a letter: the only payment path is the provider’s own page, reached from this site.

Every Extract a letter names resolves at an address on this domain. If a letter refers to an Extract, a file or a receipt and gives no address on oquendoandco.com at which that Extract can be read, treat the letter as unverified until it does.

What to do with a letter you doubt. Do not reply to it. Read the Extract at its own address on this domain, by the procedure above; a genuine letter and a genuine Extract agree. Then tell this Company that the letter exists, so the impersonation is on the record.

What this section is not. It is not an assurance about any particular letter, and nothing here is a mechanism: it is the set of facts about this Company’s own correspondence that a reader can check without relying on this page. A letter that satisfies every line above may still be read on its merits, and an Extract is authentic because it is sealed and addressed — never because a letter said so.