Under the hood
Binary reverification now reports manifest authentication and signature verification as separate results.
The retained-binary reverification flow now tracks manifestAuthenticated and signatureVerified as separate fields returned from the verify call, rather than conflating both under a single signatureVerified field as before.