Module verify_helpers 

Functions

discover_project_bundle

The committed identity bundle, when the repository carries one.

freshness_label

The human-readable label for a surfaced freshness verdict (ADR 009).

load_project_pinned_roots

The project’s pinned trusted roots, read from <git-toplevel>/.auths/roots — the committed trust declaration seeded by auths init. Empty when run outside a repo or when nothing is pinned (so every commit is RootNotPinned until a root is pinned).

parse_witness_keys

Parse witness key arguments (“did:key:z6Mk…:abcd1234…”) into (DID, pk_bytes) tuples.

require_registry

The registry URL to use, or an actionable error when none is configured.