Function verifyReleaseManifest

Parameters

• manifest: {
      artifacts: {
          dockerImageSha256: string;
          licensesSha256: string;
          npmTgzSha256: string;
          provenanceSha256: string;
          sbomSha256: string;
          secretScanSha256: string;
      };
      generatedTs: number;
      package: {
          git: { commit: string; dirty: boolean; tag: string
          | null };
          name: "agent-maturity-compass";
          node: string;
          version: string;
      };
      signing: { algorithm: "ed25519"; pubkeyFingerprint: string };
      v: 1;
  }
• signatureB64: string
• publicKeyPem: string