The verifier re-computes the SHA-256 content hash, checks the Ed25519 signature, and confirms the record's link to the previous entry in the append-only log. It also exposes a machine-readable endpoint at /api/public/verify/{id}.