v0.4.2

Verifications carry a flat decision field (verified, pending, not_observed, failed, mismatched, duplicated, reversed, policy_failed, indeterminate, unavailable) derived from the result and lifecycle, and observation_assurance naming how the underlying state was read.