Published record checksums.

Checksums are generated from the static public-root files so reviewers can identify record changes without relying on page prose.

Machine-readable

Checksum manifest

The generated checksum manifest is published at /checksums/manifest.sha256.json.