Add value-safe verification and audit reporting

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0217e-8c4c-7383-be6b-f50a6e485306

tests/test_multifield_readiness.py

@@ -83,8 +83,11 @@ def test_verify_defaults_to_every_declared_field_and_one_path_denial(
     monkeypatch.setattr(cli, "_require_lane_approval", lambda *_args: None)
     monkeypatch.setattr(cli.OpenBaoClient, "resolve", lambda *_args, **_kwargs: object())
 
-    def fake_verify(_client, _entry, field, *, positive, negative):
+    def fake_verify(
+        _client, _entry, field, *, positive, negative, unrelated_token=None
+    ):
         calls.append((field, positive, negative))
+        assert unrelated_token is None
         check = "positive" if positive else "negative"
         return [VerifyResult(check, True, {"field": field, "reason": "test"})]
 
@@ -100,6 +103,7 @@ def test_verify_defaults_to_every_declared_field_and_one_path_denial(
         field=None,
         positive=False,
         negative=False,
+        negative_token_file=None,
     )
 
     assert cli.cmd_verify(_config(tmp_path), args) == 0