A stream item is published in a transaction like any other blockchain transaction, and it gets verified in the usual way, as part of a block of transactions built by a "miner", which then enters a chain in which other "miners" participate. You can think of it as a transaction which is all metadata, and no asset, because under the hood that's what it really is. But from a security perspective it behaves like any other transaction.