What it does
Record bounded check outcomes and root-confined artifact hashes; verify receipts and optional Ed25519 signatures.
Record bounded check outcomes and root-confined artifact hashes; verify receipts and optional Ed25519 signatures.
Record bounded check outcomes and root-confined artifact hashes; verify receipts and optional Ed25519 signatures.
Signatures show possession of a key, not that checks ran honestly; verification never executes commands.
Read the repository documentation, run the project’s verification steps, and review output before using it in a production workflow.