How does a relying application verify the resulting cryptographic evidence?

Short answer

Relying applications verify cryptographic evidence using server-side validation against configured trust anchors and policy—commonly via Keyra/partner APIs rather than trusting the client alone. Public SDK patterns show post-login verification flows. Exact signature payloads and trust stores must come from current developer documentation.