verify writes an app.bsky.graph.verification naming each account's current handle and display name, which the app view requires to match. One that still matches is left alone; one that has fallen out of date is replaced in a single applyWrites. What you have already issued is read from your own repository, since the app view may not list verifications from accounts it does not trust. When it does not list you as a trusted verifier, verify still writes, and says the verification will not show. unverify deletes every verification you issued for each account. The mock PDS gains applyWrites, listRecords, display names and a trusted-verifier status for the end-to-end test.