Keep the manifest with every part
Splitting creates numbered part files and a JSON manifest with their names, exact sizes, order and SHA-256 hashes. Each set uses a fresh identifier in its part filenames. Download the manifest and all parts, retaining their filenames.
For joining, select the manifest and the full set of parts. The browser orders parts from the manifest and checks each size and hash. Missing, duplicate, mixed or changed parts stop the operation. The whole-file hash must also match before a joined download becomes available.
Parts are plaintext slices, not encrypted shares. Someone with a part can read whatever content it contains. Hashes detect changes relative to the chosen manifest but cannot authenticate a sender who supplied both files and manifest. Files are processed locally with a 64 MiB limit.