Verify network changes from the user, not the CLI

Config applied is not verification. Declare machine-checkable success criteria, sample every failure domain, and assert four layers before closing the ticket.