Declare an asset your app depends on that is pinned on IPFS (content-addressed, re-verifiable) with its
ipfs:// pointer stored on-chain in an ENS contenthash. Your app must fetch it,
verify the bytes hash to the CID, and fail closed to the on-chain floor. That is DEP.ATTESTED,
so the grade caps at B (Pinned) — one notch below fully on-chain (A), above a mutable URL (C).