Verify a HIPAA / GDPR / SOC2 export ZIP

Drop the ZIP you downloaded from the showcase's evidence-export tab. Every signed artifact in the bundle is checked client-side. A single tampered byte fails verification on exactly that artifact.