Record foreground verification commands in a bounded, profile-scoped ledger and mark evidence stale when code edits change the workspace.