Combined trust check: tx-preflight (if tx given) + tx-verify (if tx_hash given) + ipfs-verify (if cid given) in a single discounted call.