Verify a sealed record

Paste a record's leaf hash or a batch root hash. The verifier confirms its inclusion in a tamper-evident Merkle batch — no login, no tenant identity exposed.