Function verifyBomSignature

Returns {
    bom:
        | {
            activeFreezeActionClasses: string[];
            agentId: string;
            agentName: string;
            assurancePackScores: Record<string, number>;
            domain: string;
            generatedTs: number;
            git: { branch: string | null; commit: string | null };
            indices: Record<string, number>;
            integrityIndex: number;
            layerScores: {
                avgFinalLevel: number;
                confidenceWeightedFinalLevel: number;
                layerName: string;
            }[];
            overall: number;
            references: { bundleId: string
            | null; certId: string | null };
            reportSha256: string;
            riskTier: string;
            role: string;
            runId: string;
            trustLabel: string;
            v: 1;
        }
        | null;
    ok: boolean;
    reason?: string;
    signature: | {
        bomSha256: string;
        envelope?: {
            alg: "ed25519";
            fingerprint: string;
            pubkeyB64: string;
            sigB64: string;
            signedTs: number;
            signer: {
                attestationLevel: "SOFTWARE"
                | "HARDWARE";
                notaryFingerprint?: string;
                type: "VAULT" | "NOTARY";
            };
            v: 1;
        };
        signature: string;
        signedTs: number;
        signer: "auditor";
        v: 1;
    }
    | null;
}