Brian

• Server-issued prompt. The text was generated and stored server-side when the attempt was created, so it could not be obtained or rehearsed beforehand. Its digest is printed on the certificate.
• Server-side scoring. Speed and accuracy were recomputed on metyping.com's servers by comparing the submitted keystrokes against the stored prompt. Figures reported by the browser are not trusted and are discarded.
• Single-use attempt token. The attempt was consumed atomically on submission, so the same run cannot be replayed or submitted twice.
• Server-derived timing. Elapsed time is bounded by the interval the server recorded between issuing the attempt and receiving it, not by a duration the client claims.
• Plausibility limits. Results are rejected above 300 WPM, and certification requires at least 30 seconds at 95% accuracy or better.

To confirm this certificate, request metyping.com/verify/0da1e9c8-6bca-4a2b-95c5-f539ea0c8ee9. A valid certificate resolves to this page and reports the same certificate number, prompt digest and figures. Anything else — an altered number, a page that does not resolve, or figures that differ from a copy you were sent — indicates the document was not issued by metyping.com.