Two mechanisms, doing different jobs: a verification credential a human reviewer issues against a fixed evidence checklist, and a per-post provenance chain a machine can check without trusting us.