every event re-checked against the integrator's published config.

OC's billing engine is the one that computes the four-way split on every event. If it ever computes differently than the integrator's published config says it should, that's a divergence — and it lands here, automatically, in public. Empty list is the honest state; a non-empty list is a bug we need to fix. The integrator-side replay primitive is oc.event.verify in @orangecheck/me-client.