def verify_model_manifest(manifest, approved_signers, required_fields, now):
    return {'valid': ..., 'error': ...}

1. require provenance fields
2. verify signature and signer
3. fail closed after expiry

• Use only the Python standard library.
• Return deterministic values so every run can be compared with the contract.
• Do not mutate caller-owned inputs.