Module trust 

Trust anchors: the pinned WeftOS signer set plus operator-pinned keys (ADR-099 section 8.1), and optionally pinned Cognitum release keys (ADR-100 section 6.2).

Structs

PinnedKey

A pinned Ed25519 public key.

TrustAnchors

Trust anchors used by the verifier.

TrustFile

Operator trust file (JSON), as held in governance config.

TrustFileKey

One key entry in a trust file.

Enums

KeyOrigin

Which anchor set a key belongs to.

Constants

TRUST_FILE_SCHEMA

Schema id of an operator trust file.

WEFTOS_PINNED_SIGNERS

Compiled-in WeftOS release signer set, as (key_id, public_key_hex).

Functions

parse_public_key

Parse 64-char lower-case hex, or an Ed25519 PUBLIC KEY PEM block (the form Cognitum trust registries publish).