The provider keeps, for every word, the number that was drawn and the scores of the most likely options. That record travels with the answer as its proof.

Verification: a teacher-forced replay — the verifier gives the model the question and all 256 tokens at once and compares scores. A failed check counts for zero work.

“The same work, read once as an answer and once as proof.”