Module crosschecked_anchor 

Commitment-only CrossChecked anchor wire types.

This module deliberately contains no HTTP listener, route registration, persistence, signer custody, or authority construction. It only validates and encodes protocol bytes for a caller that already possesses an independently authorized verification key.

Structs

CrossCheckedAnchorRequestV1

Exact 16-key commitment-only request.

CrossCheckedAnchorResponseV1

Exact 10-key commitment-only response.

RequestValidationContext

Transport-bound inputs needed to validate, but not authorize, a request.

ResponseValidationContext

Independent commitments and verification keys required for response decode.

UnverifiedAnchorReplayLocatorV1

Minimal, explicitly unverified request fields used only to locate a previously committed replay record.

ValidatedCrossCheckedAnchorRequestV1

A validated request together with its exact body and signed-body hash.

ValidatedCrossCheckedAnchorResponseV1

A validated response together with its exact stable body bytes.

Enums

AnchorCodecError

Errors returned before a request can reach authority or persistence code.

Constants

ANCHOR_PATH

Exact commitment-only anchor path.

MAX_FUTURE_SKEW_MS

Maximum permitted request issue-time skew into the future.

MAX_REQUEST_BODY_BYTES

Maximum accepted request body size.

MAX_RESPONSE_BODY_BYTES

Maximum accepted encoded response size.

MAX_VALIDITY_MS

Maximum positive request validity interval.

Functions

decode_and_validate_request

Strictly decode and validate an exact commitment-only anchor request.

decode_and_validate_response

Strictly decode and validate a commitment-only response.

decode_unverified_replay_locator

Decode only the canonical, static fields required to locate an exact already-committed replay before live expiry or key-revocation checks.

validate_preferred_cbor

Validate one complete deterministic RFC 8949 CBOR data item.