Function verify_attestation 

pub fn verify_attestation(
    artifact: &SignedArtifact,
    receipt: &CertifiedBatch,
    account: &AccountId,
    request: OpId,
    trusted_home: Principal,
    trusted_ic_root_der: &[u8],
) -> Result<(Statement, ExecutionReceipt, u64)>

Verify an attestation end to end as kept evidence: the artifact’s signature, the IC certificate of its execution receipt under a pinned root and home at execution/<account><request>, and the receipt’s binding to the artifact, account and request. Returns the statement, the receipt and the certificate time in Unix milliseconds.

It checks no freshness: a receipt proves what the account authorized when it was certified, not that the device is still trusted.

Errors

Artifact errors propagate; any certificate or binding mismatch returns Error::IntegrityFailed.