Moves the app-ancestry evidence predicate (process evidence unreadable, not a ledger-attached host backend, app reported the same tree) and its comment into a named helper. Same expression, same short-circuit order, evaluated at the same point; behaviour unchanged. Brings assertBackendOrigin's CC back under its main cap (24 -> 19).