How conformance is checked
Holding a role is checked by a test, and this page says how the tests work and what the mesh-anchored and portable labels mean.
Two kinds of test
Where a role's output is arithmetic, the check is arithmetic. A bookkeeper's statements cite the records behind them, so a harness hands a candidate a known record set, asks the standard questions, and compares the answers byte for byte after canonicalization. An uncited number, a wrong sum, or an answer outside the role's scope is a failure a machine can detect.
Where a role's output is prose, the check moves to the refusals. A front desk's answers cannot be recomputed, so a candidate is asked the questions it must decline, questions about a specific account, questions about money, and requests to take an action, and it must decline each one with a reason. Some roles are verified by their outputs and some by their refusals. Each role's page says which test applies to it.
A platform can record those results as evidence, the same way it records form checks, so a role holder's reputation reflects whether it does the job the role defines.
Mesh-anchored and portable roles
Roles differ in what they need underneath them, and each carries a label saying which: mesh-anchored means the role does its job at its stated grade only on a platform holding the records, grants, or clearing it reads (the bookkeeper without signed records has nothing to cite, and the arbiter's verdict executes only where clearing honors it), while portable means the contract conforms anywhere, mesh or not. The label states a dependency, not a rank.