Verify from the CLI

confium verify composite \
  --message @doc.bin --signature sig.cose \
  --algorithm ed25519 --public-key pk.hex

confium verify cert-chain \
  --leaf leaf.pem --anchor root.pem --intermediate int.pem

confium verify inclusion --proof proof.json --entry entry.json

Every subcommand exits non-zero on failure, so this composes in CI and shell scripts. For the full SIGNATIF artifact pipeline see confium verify signatif --help and the SIGNATIF quickstart.