pub const PROJECT_DOMAIN_PREFIX: &[u8] = b"weftos-project-";Expand description
Domain-tag prefix of every project-key signed format
(weftos-project-cert-v1, -anchor-v1, -anchor-record-v1, forward
header, …). A signer that takes caller-chosen bytes under a key it does
not tag (the chain’s dual_sign, the tree manager’s sign_bytes, the mesh
handshake) must never sign bytes that start with it, or its signature
could be replayed as one of those statements (ADR-103 A7 note).