Verification

ruflo verify cryptographically proves that the bytes you have installed match the signed witness committed to the repository. It is the trust-but-verify doc — useful in regulated environments, supply-chain reviews, and any setup where you need to demonstrate that the runtime matches a known-good release.

See the canonical guide at verification.md on GitHub for the full command reference, witness format, and CI integration patterns.