Trust Passport claims are re-verified live

The claim: a shared XSCN proof or Trust Passport is checked again every time someone opens it, and is withdrawn if it stops being true.

A shared claim (e.g. "14 deals closed, 0 defaults" or "net worth over $50k") is not a sentence frozen at the moment it was created. XSCN stores the RECIPE behind each claim — which signal, which threshold — and re-runs that check server-side on every single view of the public link. If the underlying record has changed and the claim no longer holds, the page does not show it: a single proof reads "Withdrawn", and inside a passport that one line is removed and the reader is told how many statements were withheld. Claims are also refused at creation time if they are not already true, and every attestation held by a suspended account stops passing immediately. The verifier never sees the underlying numbers, documents, or history — only the confirmed statement.