pub fn verify(repo: &Path) -> Result<Verification>Expand description
Verify that the committed attestation names the latest code commit (#68) — the CI side of the nudge. Reads only the committed attestation: never runs e2e, never inspects the recorded exit code or output.
Equivalent to verify_scoped with scope set to repo — the freshness
walk covers everything under repo, same as before #294.