verify

var VerifyCmd = &cobra.Command{
	Use:   "verify",
	Short: "Verify attestations, commit signatures, source provenance, and policies",

	Args: cobra.NoArgs,
	RunE: func(cmd *cobra.Command, _ []string) error { return cmd.Help() },
	Long: `Commands for verifying artifact attestations, commit signatures, source provenance, and repository policies.

Examples:
  # Verify GitHub artifact attestations
  autogov verify attestation --blob-path artifact.tar.gz --repo org/repo

  # Verify gitsign commit signatures
  autogov verify git HEAD

  # Verify source provenance
  autogov verify source --attestation-path bundle.json --repo-uri https://github.com/org/repo --commit abc123

  # Verify repository policy
  autogov verify policy --ref refs/heads/main`,
}