Attested verification-event custody: seal the fact that an identity/liveness/KYC check ran, its method, provider, and result — without the subject's identity ever reaching Rubric. Caller submits an opaque subjectRef (hash it client-side); the sealed record binds event to outcome, ML-DSA-65 signed and Hedera-anchored. Prove a verification happened and what it said, forever, to anyone.