Verifies that installed packages carry valid registry signatures. It is a supply-chain integrity check that reads the lockfile and queries the registry, and it installs or modifies nothing.