pub fn init(
store: &LocalFsStore,
flags: &OpFlags,
payload: EnvInitPayload,
) -> Result<OpOutcome, OpError>Expand description
op env init. Idempotent bootstrap of the local env with its five
default env-pack bindings; on first init only also seeds the operator
key into the env trust root so signature-gated verbs (revenue-policy,
bundle/revision DSSE) work out of the box (N1.4). The gate sits on
<env_dir>/trust-root.json’s presence, so a routine init cannot
re-grant a key revoked via trust-root remove.
Outcome JSON:
outcomediscriminator:"created"|"healed"|"untouched".trust_root: seeded{operator_key_id, public_pem, trusted_key_count}on first init,nullthereafter.