vgi-core 0.17.0

Shared primitives for Verifiable Git Infrastructure (VGI): PROTOCOL.sshsig encoding, git commit-object handling, and DID-document Ed25519 key extraction.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

//! Shared primitives for Verifiable Git Infrastructure (VGI).
//!
//! Pure, dependency-light building blocks that both the signer
//! (`did-git-sign`) and the CI verifier (`verify-trust`) rely on, kept in one
//! crate so their wire formats cannot drift:
//!
//! - the PROTOCOL.sshsig encoder ([`create_ssh_signature`]) and the git
//!   sshsig namespace ([`GIT_SSHSIG_NAMESPACE`]),
//! - git commit-object handling ([`split_signed_commit`],
//!   [`normalize_sshsig_armor`], [`committer_did`]),
//! - DID-document Ed25519 key extraction ([`ed25519_signing_keys_from_doc`])
//!   and service discovery ([`registry_referral`], [`messaging_mediator`]),
//! - the forge-qualified resource grammar ([`normalize_resource`],
//!   [`resource_contains`]) that the verifier, the VTC projection and the
//!   forge adapters must all agree on byte for byte.
//!
//! Nothing here touches the network, a keyring, or a VTA — that is what lets
//! the CI verifier stay a small, fast dependency.

mod commit;
mod did;
pub mod resource;
mod services;
mod sshsig;

pub use commit::{
    committer_did, committer_identity, conflicting_signer_dids, normalize_sshsig_armor, signer_did,
    split_signed_commit,
};
pub use did::{ED25519_MULTICODEC_PREFIX, ed25519_signing_keys_from_doc};
pub use resource::{
    ResourceError, ResourceErrorKind, normalize_resource, normalize_resource_with_depth,
    resource_contains,
};
pub use services::{messaging_mediator, registry_referral};
pub use sshsig::{
    GIT_SSHSIG_NAMESPACE, assemble_ssh_signature, create_ssh_signature, sshsig_message_hash,
    sshsig_signed_data,
};