Epic: continuous public-verifiability assurance — nightly anonymous replay + one-command verifier

[JSONbored]

Problem

The public verification path (docs/verify-this-review, /v1/public/eval-scores, /v1/public/stats, the fairness report) is only checked when a human walks it. Individual breaks get fixed when found (#9636, #9639, #9719), but nothing prevents the next regression: a route rename, an auth change, or an empty export can silently invalidate the published walkthrough until someone outside the project notices.

Goal

Every public verifiability claim is exercised automatically, as an anonymous outsider, on a schedule — and a break fails loudly before anyone external can find it.

Sub-issues

• one-command public verifier (CLI) usable by outsiders and CI alike
• nightly CI job that runs the full walkthrough anonymously and fails on any step
• published fairness-report methodology page

Acceptance

Nightly job green means: an anonymous user can complete every step of the published walkthrough end-to-end, and every published record's digest recomputes. A red run pings the maintainer before it pings anyone else.

[linear-code]

JSO-6781

[JSONbored]

Closing: all three sub-issues are closed and each artifact is present on main (verified at b73347a15).

• one-command public verifier (CLI) — cli(verify): one-command public verifier — replay every published claim, print PASS/FAIL #9723, shipped as packages/loopover-mcp/bin/loopover-verify.ts + packages/loopover-mcp/lib/verify-public-claims.ts.
• nightly anonymous walkthrough — ci(verifiability): nightly anonymous walkthrough run — fail loudly on any public-path regression #9724, shipped as .github/workflows/verify-public-claims.yml with scripts/verify-public-claims-report.ts; covered by test/unit/verify-public-claims.test.ts, test/unit/verify-public-claims-report.test.ts and test/unit/verify-public-claims-workflow.test.ts.
• published methodology page — docs(fairness): published methodology page — how outcome-confirmation, coverage, and intervals are computed #9725, shipped as apps/loopover-ui/content/docs/fairness-methodology.mdx, rendered via apps/loopover-ui/src/routes/fairness.tsx.

The epic's acceptance criterion — a scheduled anonymous run that fails loudly before an outsider finds the break — is met by the nightly workflow. The ## Sub-issues checklist in the body was never ticked as the children landed; corrected in the body alongside this close.