At the moment any issue added to the database is considered to be automatically verified and "good."

In an even remotely open environment this is unlikely to be always the case and it should be the responsbility of someone on the project to verify each issue before it is properly assigned.

I.e. that person should check that the issue is in fact a new issue, should check it is assigned to the right component, should assign it to the correct developer.

Changing the "verified" flag should require a privilege or membership of a particular group.

There should be a filter in the find display to show only unverified issues. There should be an option in the project to only display verified issues by default.