Module verifier 

Walk every run for a control (or all controls) in chronological order, recompute artifact hashes, and check each prior_run.manifest_sha256 against the recomputed sha of the prior manifest.

This is the single point of integrity for an assessor; the test surface here matters more than perf.

Structs

VerifiedRun

One verified run.

VerifyFailure

VerifyReport

Aggregate report over a verification pass.

Enums

FailureKind

Functions

verify

Verify every run for control_id, or every run if None. Walks runs in chronological order (by run_id, which is ISO-date-prefixed).