$ neti verify -r d.ndjson
[exit 0]
3 records, chain intact
head: <digest>
note: a chain cannot detect records removed from the end. Keep this digest and pass it as --expect to catch that.

Pass --config to also replay each decision against the policy.
