Verify in the browser

import init, { verifyTrustedArtifact } from "@confium/confium-wasm";

await init();
const out = JSON.parse(
  await verifyTrustedArtifact(artifactJson, bundleJson, graphJson,
                              registryJson, optionsJson)
);
// out.coverage — objective report
// out.label    — classification
// out.accept   — acceptance vs your acceptedLabels

The package is verifier-only: it links no signing code, so the WASM binary stays small and nothing dangerous ships to the client. Rust/HTTP/CLI/Python run the identical pipeline — see five surfaces.