search / check split

The substrate invariant — finding evidence is untrusted search (expensive, heuristic, even LLM-assisted); verifying it is trusted check (small, deterministic, portable). admissible is always a check; stele admission already runs it.