Each chunk is committed to an append-only, signed hash-chain. Verify recomputes the proof entirely in your browser — no need to trust this server.