Verifies a JWS and reports the cryptographic verdict plus key metadata. Serialization is AUTO-DETECTED — both RFC 7515 §7.1 Compact (three dot-separated segments) and §7.2 JWS JSON Serialization inputs are accepted with no serialization parameter. The wire shape is uniform: single-signature for SIMPLE keys, multi-signature for COMPOSITE hybrid keys.

Qualified timestamp (JAdES B-T, informational). When the verified JWS carries an embedded RFC 3161 qualified timestamp (JAdES sigTst), the response surfaces an informational qualifiedTimestamp block — present, trustStatus (VALID/UNTRUSTED/REVOKED/EXPIRED/TIME_ANOMALY), genTime, serialNumber, policyOid. This block is purely informational and NEVER flips the boolean valid: a cryptographically valid signature with an absent, untrusted, or revoked timestamp still returns valid = true. The block is omitted for a compact or an unstamped JWS.