The host supplying the file shouldn't create the puzzles. The network should. Or at a bare minimum the network should verify the puzzles initially. That would be much simpler than a onetime passthrough system, and doesn't need to make it into the overview, it should go under implementation details.