API¶
A verification API should accept deployment identity plus reproducible build inputs and return explicit result class, code hash, compiler/settings evidence and diagnostic differences. Do not collapse non-success states into a binary verified/unverified response.