This repository is an educational profile and is not claimed production-ready. Report vulnerabilities privately to the repository owner before public disclosure. Never commit production keys or real confidential evidence. The HMAC verifier is a demonstrative profile, not a general-purpose key-management system.