[KSlashh]

Audit item M6. Open against dev.

verifier_validate_graph checked the graph's GC data against the local soldering proof but not who the graph belonged to. The verifier's setup state records the operator key and peer that sent the authenticated InitGraph, and CutCircuits already checks the peer. Another staked operator could assemble the verifier's slot from gossip, put it in its own graph and obtain the honest verifier's endorsement. Combined with graph-id squatting, that lets a squatted graph complete with honest endorsements.

• The verifier ignores a CreateGraph whose operator_pubkey differs from the setup state's operator key, or whose sender is not the setup operator's peer. The setup state is loaded and these checks run before the Bitcoin/GOAT lookups, so a mismatched graph costs no network calls.
• It ignores rather than invalidates: a third party must not be able to fail the honest graph by sending a bad CreateGraph for its id.

Tests: the matching operator passes; another operator's key, or the right key from another peer, is refused. Node tests and clippy pass.

Validation results above are recorded in the zkm PR notes. Branch scope and diff formatting were checked locally; builds and tests were not rerun during publication.