Module verifier 

Walk every run for a control (or all controls) in chronological order, recompute artifact hashes, and check each prior_run.manifest_sha256 against the recomputed sha of the prior manifest.

This is the single point of integrity for an assessor; the test surface here matters more than perf.

Structs

RiskFailure

A risk log that failed verification.

VerifiedRisk

One verified risk log: its chain walked clean and every finding_ref resolved to a sealed manifest whose recomputed sha matched.

VerifiedRun

One verified run.

VerifyFailure

VerifyReport

Aggregate report over a verification pass.

Enums

FailureKind

RiskFailureKind

Functions

verify

Verify every run for control_id, or every run if None. Walks runs in chronological order (by run_id, which is ISO-date-prefixed).