passthrough

Return raw proof to the caller — no on-device verification.