Module signing 

Ed25519 manifest signing and verification.

Computes BLAKE3 hash of manifest TOML content, signs with pacha Ed25519 key. Verification ensures manifest integrity before agent execution (Jidoka: stop on tampered manifest).

Phase 3: Feature-gated under native (requires pacha + blake3).

Structs

ManifestSignature

Manifest signature containing Ed25519 signature and BLAKE3 hash.

Enums

ManifestVerifyError

Errors from manifest signature verification.

Functions

sign_manifest

Sign a manifest TOML string with Ed25519.

signature_from_toml

Parse a manifest signature from TOML sidecar content.

signature_to_toml

Serialize a manifest signature to TOML sidecar format.

verify_manifest

Verify a manifest signature against content and public key.