The badge had one axis, so `iconStateFor` had to choose between what the reader is to a publication and whether the page is the publication's verified home. A subscription won that contest, so the toolbar showed a plain green ✓ on a page the popup was calling unverified in the same breath. The two are now independent: the glyph still carries the relationship, and a trailing `*` on amber says this page failed bidirectional verification. Amber `!` keeps the other thing it used to mean — detection could not run at all — under its own `failed` state. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>