A check was added to the bitcoinconsensus verify_script codepath to ensure that callers only used exposed interpreter flags. I think this error should be written to bitcoinconsensus_err* err and not returned by verify_script?
I modified the check so it indicates the error using *err like the others, and added tests covering the error codes.