Module verify 

The half of the trust chain that needs no archive.

Everything here answers questions about the signed document alone — is the signature good, is the payload a schema-version-2 release, does it describe a target this build understands. It is split out for the same reason Node splits it: a box that is already extracted has no archive to check, and re-deriving these steps beside the ones that do would create the second interpretation of a signed release that the shared inspection exists to prevent.

Structs

InspectedArchive

A signed release together with the archive it commits to, both checked.

InspectedRelease

A signed release that has passed every check possible without its archive.

Functions

assert_box_manifest_agreement

Binds the self-description inside the archive to the signed release outside it.

inspect_archive_for

The archive half, against a release this process already inspected.

inspect_box_archive

Performs the complete read-only trust chain, archive included.

inspect_release_document

Verifies a signed release document against the caller’s trust anchors.