Paste a record, add the file it describes, and this tells you whether they match — and what it could not check.
This runs the same verify.mjs the record host publishes,
unchanged. It is a convenience, not an independent check — it is served by people who
have an interest in your record verifying. The stronger path owes us nothing:
sha256sum yourfile and compare to the digest printed on the record.