Independently verify a proof-of-loss. The evidence hash is checked against its on-chain anchor and the oracle's Ed25519 signature — no account needed.