One acceptance-only transport source whose bytes are bound to the canonical
HTTPS URL stored in a deferred VFS tree only after verification. sourceUrl
may be a canonical root-relative URL, an absolute HTTPS URL, or a loopback
HTTP URL used by local acceptance. Fetches omit credentials and referrers
and reject redirects; the exact size and SHA-256 declared here remain the
authority.
One acceptance-only transport source whose bytes are bound to the canonical HTTPS URL stored in a deferred VFS tree only after verification.
sourceUrlmay be a canonical root-relative URL, an absolute HTTPS URL, or a loopback HTTP URL used by local acceptance. Fetches omit credentials and referrers and reject redirects; the exact size and SHA-256 declared here remain the authority.