Export the packet, caller-pinned root, and latest revocation journal through separate channels. Verify without network access:
witnora design-partner verify-offline --packet packet.json --root pinned-root.json --revocation-journal revocation-journal.json
witnora-verify evidence packet.json --root pinned-root.json --revocation-journal revocation-journal.json
Both verifiers use the packet's historical event timestamps for certificate and request-window checks. The latest journal is applied with event-time revocation semantics. A packet-supplied root is never sufficient.