pub fn load_operator_signing_key(path: &Path) -> Result<SigningKey>Expand description
Load the operator signing key from path (32 raw bytes, mode
0600 on Unix). This is the public helper exposed for tests and
the L1-6 sign-seed pipeline.
§Errors
- Returns a clear error mentioning
0600when the file mode is anything other than 0o600 on Unix. - Returns an error when the file length is not exactly 32 bytes.
- On non-Unix targets the mode check is skipped (file ACL applies
instead; the OSS layer does not enforce hardware-backed storage —
see
src/identity/keypair.rs“Hardware-backed key storage” section).