PMTiles + Range requests is such a clean contract — one static file, no tile server to run. Curious how per-tile verification maps to the root CID: do you fetch DAG blocks so each range slice hashes independently? Untrusted host + client-side verification feels exactly right.
