falsify (Python reference implementation)

The reference command line tool and library for PRML: canonicaliser, validator, verifier with dataset content checks, in-toto attestation output, and the lock/run/verdict/guard workflow that binds a verdict to the criteria locked before the run. Single runtime dependency, verification possible offline with nothing but the manifest text and a SHA-256 implementation.