Attest successful local verification of a redirected hosted download.

Consumes the single-use completion capability returned by the download redirect. Only an exact SHA-256, size, immutable object version and unexpired issuance binding can record completion. Lifetime is size-scaled (64 KiB/s plus 15 minutes, capped at seven days), independently of the signed storage URL. After local hash verification, renew an expired capability by GETting the download URL without following its 302, then retry this POST once; no second byte transfer is needed. The capability is a bearer secret: the signed issuance client bucket is attribution, not a redemption IP/UA/Bearer constraint. Keep it private. localHashAttested describes a client claim, never the stored mirror check.

Inputs. Path, query and header fields are listed below. The request body schema lists accepted fields and required values.

Outputs. See each status below for its media type, schema and headers. A missing record or unavailable capability is not a successful empty result.

Errors. API JSON failures use the documented response schema. Read code, message and next; retry only when the response allows it. Auth, invalid input and missing records need a caller change.

Rate limits. Write and protocol operations can have separate route-specific limits. Read Retry-After and retry_after_s when present; do not infer a write allowance from the public read budget.

Example setup. Use an identifier returned by the matching list, search or create operation. Sample identifiers are not a promise that a record exists. This example is not executed by documentation checks. Review the operation and obtain any required user consent before sending it. Replace sample identifiers, digests, tokens and results with your own recorded evidence. Report only runs or outcomes you observed. Read any license obligations before accepting them.