pub fn agent_pubkey(conn: &Connection, agent_id: &str) -> Result<Option<String>>Expand description
Fetch the Ed25519 public key bound to agent_id, if any (#626
Layer-3, Task 1.3 / C3).
Returns Ok(None) when the agent is registered but has no bound key
(the permissive-default attestation posture: such an agent can still
write claimed rows), and also when the agent is not registered at
all — both collapse to “no key to verify against”. The verifier
distinguishes the two only when AI_MEMORY_REQUIRE_AGENT_ATTESTATION
is set, where a missing key on a required write is a hard reject.
§Errors
Surfaces only underlying query failures.