Make the Environment Verifiable: Dependencies, Credentials, and Run Context