What minting once at attach time observed about a credential — the verification result surfaced back to the operator.observed_reach is what the credential can actually see, as the provider reported it, to be read next to the connection's declared reach (reach_granularity / reach_covers).