The ISO image can be obtained from the KaOS Download page, where there is also a link to the MD5 checksum. I couldn't find any information about GPG signing or other validation of either the ...