pub fn verify_file(
path: &Path,
trusted: &HashMap<String, VerifyingKey>,
) -> Result<String, String>Expand description
Verify a file on disk plus its sibling sidecar: point-in-time
attestation for operators (TOCTOU between check and use is the
caller’s concern). Enforcement paths that go on to PARSE the
file must read once and call verify_bytes on the buffer
instead — see the include hook.