Verified (Trusted)
SKI matches trusted-signers.json. Signature is valid.
Verified via TSA
Expired cert but validated by Time-Sensitive Authority.
Untrusted Signer
Signature is valid, but the SKI is not in database.
Expired (No TSA)
Cert is old; no timestamp found. Status: Expired.
Content Tampered
Pixel hash mismatch. Error: manifest.check_sum.
Broken Signature
Metadata edited after signing. Error: claim.signature.
No Credentials
Standard photo. Result: null_manifest.