auths_verifier/org_bundle/
mod.rs

1//! Offline verification of an air-gapped org provenance bundle.
2//!
3//! The pure, zero-network core of the org/member provenance story: a
4//! self-contained [`AirGappedOrgBundle`] (the org KEL, every delegated
5//! member's KEL, durable off-boarding records, pinned roots) verifies with
6//! the network cable unplugged — every event's SAID recomputed, every event's
7//! signature authenticated against the controlling key-state (RT-002),
8//! duplicity flagged, and a member's authority at a signing position
9//! classified **by KEL position, never wall-clock**.
10//!
11//! It lives in the verifier crate — the leaf dependency every surface shares
12//! — so a CI gate, a third-party audit tool, or a **browser** (via the WASM
13//! exports) reproduces the same verdict from evidence alone. The bundle
14//! *builder* (which needs a live registry) stays in `auths-sdk`; that crate
15//! re-exports these types so there is exactly one definition of the wire
16//! contract.
17
18/// Air-gapped bundle wire types.
19pub mod bundle;
20/// Typed failures for bundle and record verification.
21pub mod error;
22/// Durable, signed off-boarding records bound to on-KEL revocation seals.
23pub mod record;
24/// The offline verification engine.
25pub mod verify;
26
27pub use bundle::{AIR_GAPPED_ORG_BUNDLE_SCHEMA_VERSION, AirGappedOrgBundle, BundledKel};
28pub use error::OrgBundleError;
29pub use record::{
30    OffboardingRecord, SignedOffboardingRecord, find_revocation_event, verify_offboarding_record,
31};
32pub use verify::{
33    AuthorityAtSigning, OfflineVerifyReport, authenticate_bundled_kel,
34    classify_authority_in_bundle, verify_org_bundle, verify_org_bundle_json,
35};
auths_verifier/org_bundle/mod.rs

auths_verifier/org_bundle/
mod.rs
