wouldServe
True when this candidate cleared the threshold, was written by the embedder now running, and no guard rejected it.
A configured Verifier could still refuse it at lookup time; wouldServe describes the threshold-and-guard layer, which is where explanations live.