Are you suggesting those details are not verifiable from the client source code?