verifyAcceptsHonestTransitions

Honest-path verification: an CommutativeScheme.encrypt/CommutativeScheme.strip transition that the scheme itself produced must verify. This is the completeness half — a verifier that rejects everything is as useless as one that accepts everything, and only this property refuses it.

On its own it proves very little, and for years it was the suite's only mention of verify*: on a scheme that stubs both to true — which every scheme in this repo does, and which CommutativeScheme expressly permits — it pins the accept branch of a predicate with no other branch. verifyAnswersForgedTransitionsAsDeclared is the half that has teeth; this one is what stops that half from being satisfiable by return false.