nx_deploy_verify.nx

nx_deploy_verify.nx -- the team's capability to ADDRESS the deploy RISK + UNCERTAINTY (operator: "if there is risk build the team to address the risk and uncertainty"). The risk: rebuilding a production binary from a source that may be drifted/unpinned could REGRESS the live site. The fix is differential equivalence (the Referee discipline applied to deploy): a swap is SAFE only if (1) the build is even VERIFIABLE (source pinned + the rebuild runs), (2) the rebuild serves byte-IDENTICAL content to the LIVE site on EVERY existing route (no regression), and (3) the new route is present + correct. Crucially, when the source is NOT pinned (the current reality), the verdict is UNVERIFIABLE -> DO NOT SWAP -- the team refuses to gamble with the live family site instead of cutting the corner. license_tier: ORIGINAL Pairs with nx_deploy (backup+rollback) + nx_referee (objective equivalence).