The independent verifier reads the Base copies on a free endpoint and keeps keys out of its output
byk-verify.mjs now looks for each Base copy where the beta profile puts it: a short block range after its Solana anchor, one witness-key query bounded in time (windows mode, the default). A free keyed endpoint that allows ten blocks per eth_getLogs call completes a month-old stream in about two thousand calls, and the daily public run at github.com/bykarantelicom/byk-verifier now reads the Base witness as well. The pass over every block since genesis stays available as --base-scan range for endpoints that allow thousands of blocks per call. The reader checkpoint records which windows were walked, so a daily run walks only the new ones; a copy that is not in its window is reported MISSING instead of being silently absent. Every endpoint URL is cut to its host in whatever the verifier prints or writes, because keyed URLs carry the key and the daily run commits its output to a public repository.