# Verify a .K2F package

Drop a compiled package to inspect integrity banners, content and appearance hashes, and optional Ed25519 signature metadata. The viewer paints the published lock only — it never recompiles layout.

## Verification Checklist
- **Content Hash**: SHA-256 of `content/root.json`.
- **Appearance Hash**: SHA-256 of normalized raster output.
- **Lock Signature**: Cryptographic signature validation against embedded public key.
- **Integrity Status**: Evaluates whether package has been tampered with or relocked.