Add on-device verification for the inference path

Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)

Makefile

@@ -17,6 +17,12 @@ gate:
 audit:
 	cargo deny check advisories
 
-# Checks that need straylight. Filled in from M2.
+# Checks that need straylight. They go through a private inferproxy to the real server.
+# Override the server with: make verify-device UPSTREAM=host:port
+UPSTREAM ?= straylight:11434
+
 verify-device:
-	@echo "verify-device: nothing to check until M2"
+	cargo build --workspace --locked
+	BOXMAKER_INFERPROXY=$(CURDIR)/target/debug/inferproxy BOXMAKER_UPSTREAM=$(UPSTREAM) \
+		cargo test -p loopd --test device --locked -- --ignored --test-threads=1
+	@echo "verify-device: ok"