Module commit_bundle 

Stateless commit verification against an identity bundle (CLI + WASM). Stateless commit verification against an identity bundle — no git, no identity store, no network.

An exported identity bundle carries everything a verifier with nothing installed needs to decide “commit ← maintainer”: the identity’s KEL, one CESR signature attachment per event, and a freshness window. This module turns that bundle into a BundleTrust — a parsed trust anchor whose existence proves the bundle was fresh, self-certifying (RT-005), and signature-authenticated (RT-002) — and then verifies a raw commit object against it with verify_commit_against_kel. The same path serves the CLI (--identity-bundle on a bare CI runner) and the browser (the verifyCommitJson WASM export), so the verdict cannot drift between transports.

Structs

BundleTrust

A parsed, authenticated trust anchor extracted from an identity bundle.

Enums

BundleTrustError

Why an identity bundle could not become a trust anchor. Fails closed: an unusable bundle is rejected, never silently treated as “no constraint”.

Functions

verify_commit_with_bundle_json

Verify a raw git commit object against an identity bundle, fully stateless, returning the tagged JSON envelope (kind: "verdict" | "error").

Type Aliases

AuthenticatedDeviceKel

One authenticated device KEL from a bundle: the device’s did:keri: and its seal-checked events, oldest first.