Require distinct role provenance instead of two audit paths
When completion requires audits from distinct roles, different filenames are insufficient: duplicated or merged receipts can make one producer appear to satisfy both checks. Validate each receipt against its assigned role, observer source and registration, require distinct role-s…