shreyan (wise) @shreyanjain.net · 14/01/2025well you do verify the record that com.atproto.sync.getRecord returns, you just don't check that it's the same as the one atproto-browser fetched from com.atproto.repo.getRecord, which is the one actually being displayed 220
goeo like the @goeo.lol · 14/01/2025(this is why public-transport takes not only the uri but also the record as you know it) 110