Module trust 

Structs

TrustedKeyEntry

TrustedKeysFile

Enums

PinCheck

Outcome of checking a fetched publisher key against the trusted-key store.

Functions

accept_new_key

Overwrite the pinned key for scope, used after the user explicitly accepts a key change (e.g. via --accept-new-key).

check_and_pin

Check scope’s freshly-fetched public_key against the global trusted-key store, pinning it on first contact. Does not itself decide policy on mismatch — the caller decides whether to hard-fail or accept an override.

load

save