Verify an evidence repository

Repository verification

python tools/verify_evidence_repo.py .

The verifier checks portable bundle digests, identities, signatures, chain continuity, and deterministic contents.

Expected ingestion layout

instances/<instance_id>/bundles/<bundle_id>/
  evidence.bundle
  bundle.sha256

An ingestion pull request must add exactly these two files in one new bundle directory. Maintenance changes are separately controlled through Code Owner review.

Do not include

Never add databases, backups, private keys, secrets, names, personal email addresses, task content, or schedules to a public repository.