Function is_allowed_alg 

pub fn is_allowed_alg(alg: &str) -> bool

The single allowed signing algorithm for all DPP credentials and passport proofs.

Pinned at compile time so a future algorithm addition requires a deliberate change here plus a corresponding bump of the algorithm field in KeyRecord. Rejects alg:none and all substitution attacks by exhaustive allowlist.