Chapter 4 has all the implementation details of git-verify, itself available here:
codeberg.org/flandweber/git-ve