A deterministic KV-cache truth auditor checks engine attestations against an independent token oracle, observed prompt work, output identity, evaluator correctness, and a hash-bound bundle.