Function verify_artifact 

pub fn verify_artifact(
    capability: &ResolvedCapability,
    artifact_bytes: &[u8],
    config: &RuntimeSecurityConfig,
) -> Result<ArtifactVerificationRecord, ArtifactVerificationFailure>

Verify artifact trust metadata before execution.

Errors

Returns ArtifactVerificationFailure when a governed artifact is missing a required signature, an Ed25519 signature does not verify, or Sigstore verification cannot be completed.