Before/after outside the runtime is the structural move. Receipt anchored before, evidence after. Verifier does not need the runtime to be honest because the proof is over committed state, not runtime logs. Audit becomes architecture when the verifier is independent of the system.
