device-level verification