HandoffProof rehearses credentials, configuration, and backup recovery, with controller-recorded evidence.