A dated record of
what the page said

import hashlib, json, os, pathlib, datetime, requests

API = "https://app.snap-render.com"
HEADERS = {"X-API-Key": os.environ["SNAPRENDER_API_KEY"]}
OUT = pathlib.Path("evidence")
OUT.mkdir(exist_ok=True)

def capture(url: str, fmt: str = "png") -> dict:
    started = datetime.datetime.now(datetime.timezone.utc)
    r = requests.get(f"{API}/v1/screenshot", headers=HEADERS, timeout=120, params={
        "url": url, "format": fmt, "full_page": "true",
        "block_cookie_banners": "true", "block_ads": "true",
    })
    r.raise_for_status()
    digest = hashlib.sha256(r.content).hexdigest()
    stamp = started.strftime("%Y%m%dT%H%M%SZ")
    path = OUT / f"{stamp}-{digest[:12]}.{fmt}"
    path.write_bytes(r.content)
    record = {
        "url": url,
        "captured_at_utc": started.isoformat(),
        "sha256": digest,
        "bytes": len(r.content),
        "format": fmt,
        "file": path.name,
    }
    path.with_suffix(".json").write_text(json.dumps(record, indent=2))
    return record

print(capture("https://example.com/terms"))

# Ask a public timestamp authority to sign the file's hash.
# The .tsr response proves the file existed, unchanged, at that time.
openssl ts -query -data evidence/20261005T080000Z-3f2a9c1b7e4d.png \
  -sha256 -cert -out capture.tsq

curl -s -H "Content-Type: application/timestamp-query" \
  --data-binary @capture.tsq https://freetsa.org/tsr -o capture.tsr

# Verify later against the authority's certificates
openssl ts -reply -in capture.tsr -text

# The bucket needs Object Lock turned on (which requires versioning).
import datetime, boto3

s3 = boto3.client("s3")
retain_until = datetime.datetime.now(datetime.timezone.utc) + datetime.timedelta(days=365 * 7)

for name in ["20261005T080000Z-3f2a9c1b7e4d.png", "20261005T080000Z-3f2a9c1b7e4d.json"]:
    with open(f"evidence/{name}", "rb") as f:
        s3.put_object(
            Bucket="my-evidence-bucket",
            Key=f"captures/{name}",
            Body=f,
            ObjectLockMode="COMPLIANCE",
            ObjectLockRetainUntilDate=retain_until,
        )