Module receipts 

Portable receipt signing.

Wraps chio_core_types::receipt::body::ChioReceipt::sign_with_backend so the kernel core can produce signed receipts without depending on the chio-kernel full crate’s keypair-based helper. Using the SigningBackend trait keeps the FIPS-capable signing path available on every adapter.

Enums

ReceiptSigningError

Errors raised by sign_receipt.

Functions

sign_receipt

WYSIWYS receipt signing at the kernel-core trust boundary. This is the production signing primitive: every signature minted from evaluated content flows through here, and it never trusts the caller’s content_hash.

sign_receipt_relaying_trusted_body

Sign a receipt body using the given SigningBackend without recomputing content_hash from a content preimage.

sign_receipt_with_handle

WYSIWYS receipt signing bound to a specific evaluated artifact via a one-time ReceiptSigningHandle. This is the strongest signing API.