Expose tagged-source delivery through facade and CLI

internal/gitea/upload.go

@@ -33,12 +33,26 @@ type AssetIdentity struct {
 }
 
 type UploadResult struct {
-	State     DeliveryState
-	Matching  []AssetIdentity
-	Uploaded  []AssetIdentity
-	Pending   []AssetIdentity
+	State       DeliveryState
+	Matching    []AssetIdentity
+	Uploaded    []AssetIdentity
+	Pending     []AssetIdentity
 	Conflicting []AssetIdentity
-	Uncertain []AssetIdentity
+	Uncertain   []AssetIdentity
+}
+
+// VerifyLocalAssets checks that every expected file still matches its declared
+// size and digest before delivery begins.
+func VerifyLocalAssets(assets []ExpectedAsset) error {
+	if err := validateExpectedAssets(assets); err != nil {
+		return err
+	}
+	for _, asset := range assets {
+		if err := verifyLocalAsset(asset); err != nil {
+			return err
+		}
+	}
+	return nil
 }
 
 // UploadMissing uploads assets classified missing by InspectAssets. It stops