One bar. Two reviewers. One accountable verdict.

The browser fetches the sealed record and published keyring, recomputes the record and every digest whose content is published here, and verifies the Ed25519 signature locally. Video and frame hashes remain signature-bound manifest claims.