jujitae

Independent verification that a change kept its declared constraints. No model in the verdict path.