What is verified
Each input byte stream, the page-order policy and the final downloaded PDF receive SHA-256 hashes. The tool-specific proof records byte lengths and selected source page numbers without copying private filenames; it is not a Receipt v1 packet.