after #23 merges, I would like to add a mount config option (and expose it as a flag to atomfs mount):
atomfs mount --verity-hook=myscript.sh
so that (when root) atomfs installs a udev rule that will run myscript.sh when a device that is used by this mount is found to be corrupt, with arguments listing both the device that was used and all the OCI images that are currently mounted that are impacted.
(this second part requires adding some more metadata aside from what was added in #23
Umount will delete the rule.