Dakarún

What this proves. An AUTHENTIC bundle was sealed by the genuine Dakarún builder and has not been modified since — its Ed25519 signature checks out against the builder’s public key. NOT AUTHENTIC means the signature is invalid or the bundle is malformed: do not run it.

What this does not prove. No client-side loader is unbreakable — a determined attacker can always patch code on their own machine. Signatures prove authenticity and integrity, not invulnerability.