add a reader with sha-256/size validation