Read-only verification surface

Evidence completeness

Each entry links a capability to its available evidence, verification method, provenance, and unresolved gaps. Deployment matching remains UNKNOWN until a verified deployment source is included in the inventory.