Crate auths_transparency 

Append-only transparency log for Auths.

Implements C2SP tlog-tiles Merkle tree types, proof verification, signed note format, and tile storage abstractions.

Feature Flags

• native (default) — enables TileStore trait and async tile I/O
• Without features — WASM-safe core: types, Merkle math, proofs, notes

Re-exports

pub use bundle::BundleVerificationReport;

pub use bundle::CheckpointStatus;

pub use bundle::DelegationChainLink;

pub use bundle::DelegationStatus;

pub use bundle::InclusionStatus;

pub use bundle::NamespaceStatus;

pub use bundle::OfflineBundle;

pub use bundle::SignatureStatus;

pub use bundle::WitnessStatus;

pub use checkpoint::Checkpoint;

pub use checkpoint::SignedCheckpoint;

pub use checkpoint::WitnessCosignature;

pub use entry::AccessTier;

pub use entry::Entry;

pub use entry::EntryBody;

pub use entry::EntryContent;

pub use entry::EntryType;

pub use error::TransparencyError;

pub use merkle::compute_root;

pub use merkle::hash_children;

pub use merkle::hash_leaf;

pub use merkle::verify_consistency;

pub use merkle::verify_inclusion;

pub use note::C2spSignature;

pub use note::NoteSignature;

pub use note::build_signature_line;

pub use note::compute_ecdsa_key_id;

pub use note::compute_key_id;

pub use note::parse_signed_note;

pub use note::parse_signed_note_c2sp;

pub use note::serialize_signed_note;

pub use proof::ConsistencyProof;

pub use proof::InclusionProof;

pub use tile::TILE_HEIGHT;

pub use tile::TILE_WIDTH;

pub use tile::leaf_tile;

pub use tile::tile_count;

pub use tile::tile_path;

pub use types::LogOrigin;

pub use types::MerkleHash;

pub use store::TileStore;

pub use verify::verify_bundle;

pub use verify::verify_checkpoint_signature;

pub use verify::verify_witness_cosignatures;

pub use witness::ALG_COSIGNATURE_V1;

pub use witness::CosignRequest;

pub use witness::CosignResponse;

pub use witness::DEFAULT_WITNESS_TIMEOUT;

pub use witness::WitnessClient;

pub use witness::WitnessResult;

pub use witness::build_cosignature_line;

pub use witness::collect_witness_cosignatures;

pub use witness::compute_witness_key_id;

pub use witness::cosignature_signed_message;

pub use witness::extract_cosignatures;

pub use witness::parse_cosignature;

pub use witness::serialize_cosignature;

pub use witness_policy::WitnessPolicy;

pub use witness_policy::WitnessPolicyEntry;

pub use witness_policy::WitnessPolicyError;

pub use witness_policy::ceiling_for_policy_load;

Modules

bundle

Offline verification bundles.

checkpoint

Log checkpoint types.

entry

Transparency log entry types.

error

Error types for transparency operations.

merkle

RFC 6962 Merkle tree operations.

note

C2SP signed note format.

proof

Inclusion and consistency proof types.

store

Tile storage trait (behind native feature).

tile

C2SP tlog-tiles path encoding.

types

Core newtypes: MerkleHash, LogOrigin.

verify

Offline bundle verification (requires native feature for Ed25519). Offline bundle verification logic.

witness

Witness protocol for split-view protection (requires native feature). Witness protocol for transparency log split-view protection.

witness_policy

Typed, fail-closed witness-diversity policy loader. Typed, fail-closed witness-diversity policy (data/witness_policy.json).

Structs

FsTileStore

Filesystem-backed tile store.

HonestyCeiling

The honest current truth about a witness set, rendered identically by every surface — CLI witness status, verify output, and the cross-repo badge (via the serialized form). Computing it in ONE place means no surface can forget the ceiling or re-derive met/failing differently.

IndependencePolicy

Minimum-diversity thresholds an independent quorum must clear.

OperatorAttributes

The independence-relevant attributes of one attester in a quorum.

TrustConfig

Multi-log trust configuration.

TrustRoot

Trust root for verifying transparency log checkpoints.

TrustRootWitness

A trusted witness in the TrustRoot.

WitnessOperatorInfo

The independence attributes pinned alongside a witness key.

Enums

EquivocationDetection

Whether cross-operator equivocation detection is merely sampled or non-repudiable. Until the gossip layer (W.3) lands, detection is Sampled — a surface must say so rather than imply a guarantee it cannot make.