In case it's useful, I enabled additional debug logging for the Guest
device_model_args = ["-debugcon", "file:debug.log", "-global",
"isa-debugcon.iobase=0x402"]
Then from guest launch to 'Verification Failed' error message,
cat debug.log
======> http://pastebin.com/SKH8jqM1