hostVerifiedPrincipalOutranksThePeersClaim

Security. When the host's verification and the peer's claim disagree, the host wins. This is the half peerAssertedPrincipalNeverReachesTheRoster cannot reach: a hub that consults the peer's claim only when it has no stamp of its own passes that one and fails this one, and a hub that lets the claim override passes neither.

mallory is attested, so the roster entry read here is one the attestation path genuinely produced — the assertion distinguishes two live values rather than confirming an empty map.