For any high-trust system, users need to know exactly what was verified, what was not, and which assumptions the verification depends on.