A direct TSA call needs a CORS-enabled TSA. Otherwise download the request, get it stamped, and attach the response.
Unchecking a box forbids that action. Rights are sealed in META (immutable once signed) and honoured by the reader — like PDF permissions, not DRM.
Then load your key and press Sign in the Secure menu to sign & download.
Optional: load trust anchors, then use Verify in the Secure menu to check a signed file and see its level.
Embed revocation proofs (LT) and a renewable archive timestamp (LTA) so a signature stays verifiable for years. Archiving uses the TSA above.
No legal reasoning — this document has no reasoning package active.