7cb5d8d8c4
---ci--- project: orca phase: 25 milestone: v0.12 status: execute ---/ci--- VerifyEventSignature: per-peer HMAC-SHA256 via HKDF(masterKey, peerID, 'orca-drift-event-hmac'). Aggregator rejects unsigned/forged events. Test: valid/wrong-key/wrong-peer/tampered/empty cases. Build + tests green. Per-peer key deployment at /etc/orca/keys/drift-hmac.key (0600, orca user) is handled by peer-setup (documented).