Module verify_helpers 

Functions

load_project_pinned_roots

The project’s pinned trusted roots, read from <git-toplevel>/.auths/roots — the committed trust declaration seeded by auths init. Empty when run outside a repo or when nothing is pinned (so every commit is RootNotPinned until a root is pinned).

parse_witness_keys

Parse witness key arguments (“did:key:z6Mk…:abcd1234…”) into (DID, pk_bytes) tuples.