Module sign 

Sign-hook + smoke-verify + atomic release-dir write.

Functions

atomic_write 🔒

sign 🔒

smoke_verify 🔒

Structural smoke verify: byte-stable canonicalize round-trip + schema parse + non-zero sig. No cryptographic verification.

write_release 🔒