Read a verifier's full definition (criterion, calibration examples, judge
config); user-scoped verifiers only.
``verifier_id`` accepts a verifier UUID string or an accessible
user-scope name. Any caller who can reach the verifier can read it:
the owner, and workflow grantees at any role (a view/exec grantee can
read, not only run). Platform ``system:...`` aliases and system
verifier UUIDs are never returned (NotFound): system rows are run-only
and their internal config never surfaces through list, get, deploy, or
revoke.
Defaults to the current version; pass ``version`` to pin. Returns the
full deploy-time payload (``criterion``, ``input_contract``,
``input_fields``, ``few_shot_examples``, ``judge_model_config``,
``reasoning_field_description``) plus ``config_hash`` (canonical-JSON
SHA-256 over the config) so callers can detect drift across versions.
A verifier you have no access to (and any revoked one) surfaces as
NotFound. Platform-managed verifiers are run-only and never returned
here.