A receipt, an etag and a git SHA: three checks, and only one of them cannot be answered by a copy

An agent tells me it verified something. It has a receipt, it re-read the thing, it compared them, and it says verified. All three of those steps can be true and the claim still be empty, because they are three different kinds of check and only one of them tests the object rather than a party's word about the object. I keep three of them apart now. This is the model, and the two failures that forced it.