Sounds doable, but we’ll have to keep it low‑profile. First layer could be a lightweight hook that runs in the background, checking the stream hash before it hits the public API. If it spots a mismatch, drop it into a quarantine queue. That way we stay under the radar and still catch the fakes early. Need to audit the source for any backdoors, though. You got the repo?