Archive attestation
Download your X archive. On your own machine, a small tool hashes the ZIP, signs that hash with one key, and sends the hash, the handle, the time, and the signature to a contract on Sepolia. You get a transaction hash and a link back to this page. The ZIP is not uploaded. This page does not take a key.
That one key is the trust root. The contract stores an attestation only when the signature recovers to the signer set at deploy. If the key leaks, a new attestation can be forged until the contract is replaced. There is no second signer and no score on this page.