Verify a signed spend statement

POST a statement back to check it. The digest is RECOMPUTED from the rows you submit and never taken from the submitted digest field — otherwise a genuine signature could be paired with fabricated numbers. Alter any amount and verification fails. You do not need this endpoint to trust the result: the signature is a standard EIP-191 personal_sign over the digest, so you can verify it entirely offline against the published signer address.