Repeating from rozbb/draft-waict-transparency#16:
Several people have already raised the concern that we don't say where in the execution pipeline WAICT verification lies. It should be made clear that JS or plugins that modify the DOM logically run after WAICT verification. In other words, once WAICT marks a page as verified, it does not change the functionality of any code that subsequently runs.
Credit to @stefanhamburger for this