Four authorities must agree structurally

Verification compares four independently derived views — what the source declared, what the reader resolved, what the graph recorded, what the container encodes — as pairwise links, so a failure names the two that disagree. Payloads are re-hashed at both ends, so a drifted checkpoint fails differently from a corrupted container, and the tensor table is compared entry by entry because a relabel over identical bytes is invisible to every hash.

PASSED · G4 — four-authority comparison plus payload-hash equality