What a verified download actually checks.

On download the SDK requests shards until 10 verify, then stops. It does not pull the other 20.

Those 20 exist for repair and for hosts that are slow or absent; a successful read is 10-of-30, not a full fetch.

We have not published a live drill that takes hosts offline and still reconstructs. A verified download shows the read path works; it does not by itself prove recovery under failure.