I don't like the idea of this using bitcoin. I wonder if it's possible to build this off of regular PKI - certificate transparency logs for instance encode the proof of commitment, while the signature can be an X509 certificate.

The standards exist. The problem is, the certificates are not cheap, because there is real KYC needed.

https://en.wikipedia.org/wiki/PAdES

[flagged]