Struct Verifier 

pub struct Verifier<'a> { /* private fields */ }

Stateless verifier. Requires a DID resolver to fetch producer keys.

Implementations

impl<'a> Verifier<'a>

pub fn new(resolver: &'a WebResolver) -> Self

pub async fn verify_body(&self, body: &Body) -> Result<(), AcdpError>

Full end-to-end verification per RFC-ACDP-0001 §5.11.

Steps:

1. (Implicit) Check key_id has a #fragment.
2. Verify key_id DID portion equals body.agent_id.
3. Resolve the DID document.
4. Find the verification method by fragment.
5. Check assertionMethod authorization.
6. Extract the Ed25519 public key.
7. Verify the signature over the content_hash ASCII bytes.

(Hash recomputation is step 0, performed first.)

pub async fn verify_body_signed(&self, body: &Body) -> Result<(), AcdpError>

Verify only the hash recomputation + DID resolution + signature envelope, assuming structural validation has already been done by the caller. Use when you want to separate structural failures from cryptographic ones — e.g. Self::verify_body itself runs acdp_validation::validate_body first and then delegates the hash + signature phases to this method, so the two concerns stay independently testable.

pub fn verify_body_hash(&self, body: &Body) -> Result<(), AcdpError>

Step 0 only — recompute the content_hash over ProducerContent and compare against body.content_hash. Lets diagnostic callers record hash-pass/fail independently of the signature stage (FEAT-05).

pub async fn verify_body_signature(&self, body: &Body) -> Result<(), AcdpError>

Steps 1–7 only — resolve the producer’s DID, find the signing key, verify the signature over the (already-stored) body.content_hash. Assumes Self::verify_body_hash (or an equivalent check) has already run.