Function replay_strict 

pub async fn replay_strict(
    dir: &Path,
    model: &ModelConfig,
    run: &str,
    format: &'static dyn Adapter,
) -> Result<Option<Verdict>, PlaneError>

Strictly re-derives a recorded run and says whether this build reproduces it: history is consumed, nothing is dispatched. The model driver is agentplane’s replay-only provider, which reads the request profile back from the history and refuses every call, so no credential is needed. A faithful replay of a run that failed is Finding::Verified too — the recorded ending is what is verified. Ok(None) when the run is not in the journal.