verifyAcceptsHonestTransitions

Honest-path verification: an CommutativeScheme.encrypt/CommutativeScheme.strip transition that the scheme itself produced must verify. Current schemes stub the verify methods to true, so this pins the baseline a future (e.g. ZK-proof) implementation must also satisfy — honest transitions are always accepted.