Function data_ticket_bytes 

pub fn data_ticket_bytes(
    transfer_id: &str,
    recipient_agent_id: &str,
    data_plane_url: &str,
    expires_unix: i64,
    nonce: &str,
) -> Result<Vec<u8>>

Canonical bytes signed by the control plane when issuing a data- plane ticket. A ticket is a short-lived capability that authorises the holder to fetch blob bytes from a data-plane server directly, without the control plane proxying the stream.

Data-plane servers verify the ticket signature against the control plane’s published public key (fetched from /.well-known/spize-cp.pub or out-of-band) before streaming bytes.

spize-data-ticket:v1
transfer={transfer_id}
recipient={recipient_agent_id}
data_plane={data_plane_url}
expires={expires_unix}
nonce={nonce}