Every tester is SDK-verified: a lightweight SDK pings the backend from inside the real, installed app (package and version tagged automatically), and a developer's own app can't even open a campaign until that same integration has proven itself once. No self-reported checklists, no screenshots — every tested day is a real, timestamped ping from a real build, on both sides.