pub fn verify(repo: &Path) -> Result<Verification>Expand description
Verify that the committed attestation names the latest code commit (#68) — the CI side of the nudge. Reads only the committed attestation: never runs e2e, never inspects the recorded exit code or output.