pub fn load(env_dir: &Path) -> Result<TrustRoot, TrustRootError>Expand description
Load <env_dir>/trust-root.json into a verifier-ready TrustRoot.
A missing file returns an empty trust root (is_empty() == true) —
the verifier then rejects every signature, which is the intended
closed-by-default behavior.