pub fn verify_bytes(
file_label: &str,
bytes: &[u8],
sidecar_text: &str,
trusted: &HashMap<String, VerifyingKey>,
) -> Result<String, String>Expand description
Verify file bytes against sidecar text and a trusted-keys map. Returns the signing key id on success; every failure names the file and the reason, never key material.