Core commands: npm install, npm run generate:demo, then npm run validate.
Independent CLI example: npm run cli -- verify --file public/demo/quranverify-demo-reference.txt --manifest public/releases/demo/quranverify-demo-2026-10-06/manifest.canonical.json --signatures public/releases/demo/quranverify-demo-2026-10-06/signatures.json --policy trust/demo-trust-policy.json.
Never place private keys or real source artifacts into public output.