pub fn binding_message(spki_der: &[u8]) -> Vec<u8> ⓘ
The exact byte string the BLS-G2 self-attestation covers: the domain-separation context then the leaf’s SPKI DER. Used identically when signing (attest) and verifying.