Function verify 

pub fn verify(
    input: &EvidenceInput,
    witnesses: &[IndependentWitness],
    now: DateTime<Utc>,
    max_age: Duration,
) -> VerifiedTrustState

Pure reducer over independent witnesses.

now and max_age are injected by the caller so the trust path remains deterministic and clock-independent. The CLI is responsible for resolving now (typically Utc::now()) and passing it in.