A capsule's quality badge is a checklist you can re-run yourself — not a stamp you have to take on trust.
A cert is a signed statement of which criteria a capsule passed — knowledge (a trusted oracle attested it), competence (its committed code re-runs to the expected output), capability (it provides what it claims). The keystone: every criterion re-checks on verify, so a lazy or compromised authority can't certify something untrue. A validly-signed cert claiming an unearned criterion is refused. It all runs on your device.
Run against signed evidence. The impossible criterion (X) is included on purpose — it will not pass.
verifyCert re-runs each criterion against the evidence, checks the authority signature, the capsule binding, and revocation.
Forge stamps the impossible criterion as passed and re-signs the lie with the authority's own key. The signature is valid — and the cert is still refused, because the criterion doesn't re-check.