Sortify computes an xxHash64 of every file while it copies, then reads every file back off the destination and compares. Only then does it count as verified. A mismatch is copied again once; if it still does not match, that file fails visibly and the rest carries on.
“Safe to format in camera” appears only when every selected file and every sidecar came back matching. Not after the copy. Not after a completion tick. After the read-back.
Each shoot folder gets an ASC MHL manifest, the open standard pro offload tools read, and Verify Folder re-checks a copy against it months later. A pulled card, a crash or sleep leaves no half-written file looking finished; the next run skips what was proven and continues.