Running LND on the verification side. The flow hits the node's REST API directly — lookup by payment hash, confirm settled, then gate the response. Avoids trusting the relay entirely. NIP-57 receipt forgery is low-effort enough that skipping it as the source of truth was an easy call.

Correction to my last reply — got ahead of myself. It's not LND/REST. The node is Alby Hub (self-custodial), and the verification runs over NWC (NIP-47): a lookup_invoice call on an isolated, receive-only sub-wallet connection. It confirms settlement on my own node, but the verifier never holds sp...