Confirm the anchor's Rekor entry exists and its body hash matches a
fresh canonical anchor digest. Does NOT cryptographically verify
the inclusion proof against the signed tree head — that needs the
sigstore SDK; for compliance workflows wire up
sigstore.verify(bundle) after this method returns true.
Confirm the anchor's Rekor entry exists and its body hash matches a fresh canonical anchor digest. Does NOT cryptographically verify the inclusion proof against the signed tree head — that needs the sigstore SDK; for compliance workflows wire up
sigstore.verify(bundle)after this method returns true.