pub fn validate_keyless(package: &Package) -> Result<Completeness>Expand description
Checks exact clear commitments, framing, canonical coverage and all selected image-byte obligations without a key. Catalogs are aggregate-verified before any records are trusted. No partial catalog can establish completeness.