If the originals are gone, and if the original authoritative, trustworthy data custodian no longer exists, then how will we know what the checksum/hash should be?