If you want to better understand zap.store's web of trust checks, here is a web version to play around with: