Paste a signed response from GET /v1/xena/capabilities or GET /v1/xena/assets.
Everything below is checked in your browser with the public key alone — you do not have to trust any Arobi server.
This is the point of the platform: capability you cannot govern is capability you do not control, and a claim you cannot
verify is a claim you should not believe.
utf8(anchor.root); the digest recomputes from the returned content.