Module tap 

Federated package tap trust primitives.

A tap is an independently operated registry/identity pair. The local tap store contains only public, out-of-band trust anchors; it never contains a publisher private key.

Structs

IdentityPolicy

InitializedTap

PublisherKey

Tap

Enums

TrustMode

Functions

add

add_mirror

authorize

bootstrap

Installs the only built-in bootstrap profile. It intentionally names the GitHub-governed official Hara repositories; arbitrary taps remain signed root-key taps added explicitly by the user.

bootstrap_with_official_root

Bootstrap entry point for callers that already obtained the official root fingerprint from an authenticated distribution channel.

canonical_intent

canonical_recipe_intent

clone_first

config_root

fetch_verified_policy

Fetches identity policy from any configured mirror and verifies the policy signature against the local, out-of-band fingerprint before reading grants.

git

initialize

Creates the two local repositories that make up a new tap.

initialize_signed

Writes an already signed initial policy. This is public for embedders that use a signer API rather than the HARA_SIGNER command protocol.

load

remove

sign

The external signer receives canonical intent bytes on stdin and returns {:key/id "..." :signature "<hex-ed25519-signature>"} on stdout.

trusted

trusted_or_builtin

verify_trusted

Verifies the currently trusted identity policy for a tap without exposing command-line parsing or temporary-directory policy to the Hara CLI layer.