Formal-verifier rationale evaluation via span follows diagnostic