Basically, I'd like to see if/how I can help, but in looking at the TUF code, it looks like what I was originally thinking isn't 1:1 compatible with the direction your going.  I'm not really sure how the command gem would/should integrate with the TUF verifier that's in dev.  

Since I'm a little foggy on the details,  what I wrote was kind of foggy too. FWIW, Maybe this clarifies what I meant?

- There's no dependency on a new /rubygems(.org)?/ release for me to work with you in some capacity using gem-checksum. 
- And if you're not interested in the command element, there could still be hashing and verifying logic in the library part of it (that doesn't rely on rubygems).

The take away is just an offer to help in some way without (yet) fully knowing what that would look like. Any other details that don't make sense can be safely ignored. :+1: