 
that corrective action can be taken as soon as possible. The repository should allow interested 
parties to verify that this is the case. 
At present, most repositories deal with this at the level of individual information objects by 
using a checksum of some form, such as MD5. In this case, the repository should be able, 
and may want to demonstrate that, the Fixity Information (checksums, and the information 
that ties them to AIPs) are stored separately or protected separately from the AIPs 
themselves