Run python3 verify_follow_offline.py with public_crypto.py and transaction_recovery.py beside it. Python standard library only. The verifier denies network and child-process events. It checks 45 current/prior state fields, three transaction signatures and receipt/header membership, two bounded nonce transitions, the signed deposit request and emitted event, and DD's 100 ETH pool denomination and balance arithmetic. Full boundary-block object responses remain local discovery files; public replay uses targeted transaction/receipt/header captures and nonce reads. Rate-refused and skipped history scopes remain gaps. This verifies record consistency and signatures; it does not link a Tornado withdrawal to C91's note or a person.
