one trimmed stylesheet: what the origin must send for it to be served, and what it needs
the trimmed stylesheet
tokens whose absence removed a rule; a page that has one gets the full file
the same-origin script keys the tokens were built with
sha256-<base64> of the origin's bytes the entry was built from
sha256-<base64>
one trimmed stylesheet: what the origin must send for it to be served, and what it needs