signatures/verification-instructions.txt

====================================
MODEL SIGNATURE VERIFICATION GUIDE
====================================

Model: CohereLabs/command-a-plus-05-2026-w4a4
Revision: main
Environment: PRODUCTION
Signed at: 2025-10-27T18:55:09Z
Workflow Run: https://github.com/cohere-ai/model-signing/actions/runs/26502507077

TRANSPARENCY LOG
----------------
This signature is recorded in the Sigstore Rekor transparency log.

Rekor Entry: https://search.sigstore.dev/?logIndex=1641501828
Log Index: 1641501828
Identity: https://github.com/cohere-ai/model-signing/.github/workflows/sign-model.yml@refs/heads/main

VERIFICATION
------------
To verify this signature locally:

1. Install the model-signing package:
   pip install model-signing

2. Install huggingface_hub and download the model:
   pip install huggingface_hub
   huggingface-cli download CohereLabs/command-a-plus-05-2026-w4a4 --revision main --local-dir ./model

3. Verify the signature:
   model_signing verify ./model \
     --signature command-a-plus-05-2026-w4a4.sig \
     --identity "https://github.com/cohere-ai/model-signing/.github/workflows/sign-model.yml@refs/heads/main" \
     --identity_provider "https://token.actions.githubusercontent.com" \
     --ignore_unsigned_files

Note: This signature was created with selective file inclusion (*.safetensors,*.bin,*.json,*.txt,*.model,*.yaml,*.yml).
      Use --ignore_unsigned_files to verify only the files that were signed.

====================================