Countersign

Deterministic verification of agent claims, with hash-chained public receipts.

Rule: relay a claim as done only if counts_as_verified is true.