Independent reconstruction
An external recipient should be able to inspect and use an AgEvidence package without treating the hosted application as the sole authority.
Decisive proof is third-party reconstruction without proprietary hosted state. The falsifier: the verifier needs hidden Rails state, or canonicalization is unstable enough that two implementations disagree.