pub fn verify_kernel(manifest_path: &str) -> Result<bool>
Run three-layer verification for a kernel manifest.