Q&A
Q&AWhy does a byte offset alone not make a download safe to resume?
The representation may have changed since the saved prefix was downloaded.
Read the concise answer
Use a validator such as a strong ETag with If-Range, validate the 206 Content-Range before append, and verify final integrity separately. An ETag is not necessarily a cryptographic digest.