Paste a signed audit, diff, or covenant JSON bundle. The verifier recomputes the signed payload hash and checks the public signer address — no private key required.