Verification

A verdict binds subjectDigest + evidenceDigest + profile + result. The subject digest covers Spec Kit artifacts, the ACKit task/config/policy snapshot, bridge config/profile/version, tool versions, and Git HEAD/diffs. The evidence digest covers redacted per-check outputs.

ackit-speckit verify --profile standard
ackit-speckit gate

Freshness

status / gate recompute the subject digest: equal → FRESH, differ → STALE (gate fails, exit 1), missing → NOT_VERIFIED. stalePolicy: fail is the only supported policy.