verification response is now just a list of UUID mappings