* fix(verification): compare retained Ghidra function evidence * test(verification): require the exact missing Evidence refusal