Repairing a single-use verification flow

Turn a synthetic verification workflow into explicit state transitions, then challenge a stale-grant bug with a repeated-code regression.