The lint walks every step and flags the dangerous combination: the model wrote it AND nobody who does the task has confirmed it. Fill in the condition.
Note step 4: model-filled but Vera already verified it — that one is fine. Provenance alone isn't the problem; provenance without verification is.
Expected output:
step 1: ok
step 2: ok
step 3: UNVERIFIED MODEL FILL
step 4: ok