If the hashes match, the source code you are looking at the binary running on your players’ machines. If they don’t match, the anti-cheat has been tampered with (or updated without notice).
If the source is not publicly verifiable, users implicitly trust the vendor. Potential threats include:
Through the verification process, the following capabilities of the Verus engine are confirmed to be authentic and unmodified: