Module verify 

Package verification: manifest frame, signatures against pinned anchors, then every listed file by size and BLAKE3.

Signatures are checked before any file is read, so an unsigned or mis-signed package never causes file I/O beyond the manifest itself. Each failure class has its own VerifyError variant and stable VerifyError::code.

Structs

AcceptedSigner

A signer whose signature was accepted.

DirSource

Reads files from an unpacked package directory.

VerifiedPackage

A package that passed verification.

VerifyPolicy

Verification options.

Enums

VerifyError

Why a package was rejected.

Constants

MAX_FILE_BYTES

Largest single package file read during verification.

Traits

FileSource

Where package files are read from.

Functions

check_file

Check one file’s size and hash.

verify_dir

Verify the package in directory dir (manifest at dir/cogpkg.json).

verify_dir_in

verify_dir against a caller-supplied kind registry.

verify_manifest_signatures

Verify the manifest envelope and its signatures without reading any listed file (mesh-placement-11).

verify_manifest_signatures_in

verify_manifest_signatures against a caller-supplied kind registry.

verify_with_source

Verify manifest bytes, reading listed files through source.

verify_with_source_in

verify_with_source against a caller-supplied kind registry.