Create verify.sh

verify.sh

@@ -0,0 +1,28 @@
+#!/bin/bash
+set -euo pipefail
+
+MODEL_FILE="model.safetensors"
+SHA_FILE="model.safetensors.sha256"
+SIG_FILE="model.safetensors.sig"
+
+if [ ! -f "$MODEL_FILE" ]; then
+  echo "Model file not found: $MODEL_FILE"
+  exit 1
+fi
+
+if [ ! -f "$SHA_FILE" ]; then
+  echo "SHA file not found: $SHA_FILE"
+  exit 1
+fi
+
+echo "Verifying SHA-256 checksum..."
+sha256sum -c "$SHA_FILE"
+
+if [ -f "$SIG_FILE" ]; then
+  echo "Verifying PGP signature (requires maintainer public key installed)..."
+  gpg --verify "$SIG_FILE" "$MODEL_FILE"
+else
+  echo "Signature file not found: $SIG_FILE (skipping signature verification)"
+fi
+
+echo "Verification complete."