Surely the way to do this would be to embed a SHA-256 of the source file. That's something that can theoretically be hosted anywhere and easily recovered if you don't have it locally.