Payment proves you paid. Hash checks prove the files match the listing claim.
Two different proofs
1. **Payment verification** — chain says USDC arrived
2. **Content integrity** — delivered files match published data_hash
Neither replaces the other.
Conceptual flow
1. Note listing hash (ERC-7857 style metadata)
2. Unlock sealed files
3. Canonicalize + hash
4. Compare; quarantine on mismatch
What integrity does not mean
A matching hash does not mean the skill is useful, safe, or continuously monitored. It means **package integrity at seal time**.
Takeaway
Agents should verify content, not only payment receipts.