Give a manifest address and a relay to resolve the signed manifest over Nostr and find an origin in seeders' beacons, or give an origin and a root directly. Every file is checked against its sha256 and the hash list before the player uses it (NFX-05 ยง4).