koh / b1b93bfca013

bare koh verify now infers tool + Kepr host from the default remote (.koh/remotes) and runs the provenance check instead of delegating to the integrity check — koh check remains the object-store integrity check; resolveFromRepo derives the binary name via Repo.offerName and the host via normalizeUrl; man.txt + 09-freeze test updated to match

dev · 6 weeks ago · 2026-06-08 · 10.3 MB

session: verify provenance no-args · agent: claude-opus-4-8

parent: bec64075cd45