How to check KVT-REC-2026-NETTEN-01 yourself

1. Check the files match:
   shasum -a 256 -c SHA256SUMS.txt

2. Check KVT's signature (OpenSSL 3):
   printf 'KVT-REC-2026-NETTEN-01/v1\n' | cat - NETTEN_Record_KVT-REC-2026-NETTEN-01.md > message.bin
   openssl pkeyutl -verify -pubin -inkey kvt-record-key-R1.pub.pem -rawin -in message.bin -sigfile NETTEN_Record_KVT-REC-2026-NETTEN-01.sig
   Expected: "Signature Verified Successfully". Public key (raw Ed25519):
   bd56ae14db5571a70b41e21abb5a1df3e325ab7ce380f2b28548020023c2ed22

3. Re-read the ledger (Python 3.8+, no account, no keys):
   python3 recheck.py --ledger 107713543
   Expected: "servers_agree": true and "HOLDS: no outside payer's signing control points to a NETTEN account".