verify

30-second answer

verify checks an assessment that arrived. It is deliberately its own command, because verifying is what a recipient does to a document, and a check that needed the producer would only ever be telling them what the producer already believes.

m365-governance verify [-h] assessment

What it prints when the document holds

<assessment id>
  tenant     <host>
  directory  <directory id>
  identity   <summary>: <kinds>
  acquired   <kinds>
  created    <timestamp>
  label      <label>
  resources  <count>
  evidence   <count> documents

That is the manifest, restated. acquired is where you find out whether the underlying evidence was observed against a tenant or came from fixtures, which is the difference between a reading and an example.

What it prints when it does not

The problems, one per line, then:

<path> does not verify.

When the document is not an assessment

The command says so, and names the command you probably wanted:

<path>: not an assessment. `verify` checks the document `assess` writes;
to re-render a report use `report`.

Exit codes

0 verified. 1 the document did not verify. 2 the file was not an assessment.