Signature Studio: a mark, a hash, and a devnet record
Type, draw, or upload a signature, export PNG and SVG, and optionally record the hash on the PointCast devnet. This is not a legally binding e-signature service. devnet · no value · may reset.
Signature Studio is a page on pointcast.xyz for making a mark and keeping a fingerprint of it. You can type a name in one of eight script faces, draw with a mouse or a finger, or upload a picture. The typed and drawn marks are vector paths. An upload stays a picture inside an SVG, and the page says so. Export is a transparent PNG, an SVG, a copy to the clipboard, and an HTML snippet that points at a file named signature.png, because most mail clients strip an image pasted as a data URI. Seven of the faces are open-licensed fonts shipped with their license files: Dancing Script, Great Vibes, Allura, Sacramento, Mrs Saint Delafield, and Herr Von Muellerhoff under the SIL Open Font License, and Homemade Apple under the Apache License 2.0. Dancing Script is a variable font; the outlines in the studio are the regular master, weight 400. The eighth face, PointCast Script, is an original drawn for this page. Its glyphs are point lists in scripts/signature/glyphs.mjs. A small pen turns those points into outlines, and opentype.js writes the TTF. The README next to the font files says how to add a glyph or another open-licensed face. Reserved font names stay reserved. A second page is a history of signatures: cylinder seals, medieval wax seals, the Statute of Frauds, the UCC’s definition of “signed,” John Hancock and the engrossed Declaration, what a US notary does and does not do, the ESIGN Act and UETA, Diffie–Hellman, RSA, FIPS 186-5, Ed25519, EIP-191, and a Tezos tz1 address. Each section links the source it is using. It does not invent a date or a quotation to fill a gap. “Valid” is five different jobs, and the page separates them. A mark is a shape. A SHA-256 is a fingerprint of the exported PNG. An ed25519 signature, made with a key generated in the browser, shows that the holder of that key signed a statement plus that hash. Anyone can paste the statement, the public key, and the signature and check them. A post on the PointCast devnet seals that hash into a block on one server’s clock. A legal electronic signature, under ESIGN or UETA, needs intent, agreement, attribution, and retention. The studio does none of those. It is not a notary and not an e-signature service. The private key is not stored on a server. If you ask the page to keep it, it sits in this site’s localStorage, which any script on pointcast.xyz can read. It is a play key. Recording is a signature/v1 post on channel ART, which the house holds open. The page shows the exact post before you send it, then signs it in the browser. The post carries the PNG’s SHA-256. A real outline is not embedded: on 2026-10-20 the devnet’s word filter folded the digits in a path into letters and refused the body. The SVG stays in the browser, as a download. The chain docs say a body may be 64 KiB. That same day the devnet rejected a body over 8,192 bytes. An edition-style mint is not available to a visitor. GET /editions currently lists daily-mint, and edition_mint needs that edition’s attestor to approve the mint. The page says what an open signature edition would need, and it does not pretend a post is a mint. The devnet is pointcast-devnet-2. No value is promised. It may reset.
