Module root_attachment 

Portable evidence that a root-derived credential holder owns an Iroh endpoint. The credential is private verification input, never part of the public record. An attachment establishes a locator binding, not permission for future work: verify each current request’s complete Biscuit chain and revocations separately.

Structs

VerifiedAttachment

Evidence verified at the caller’s supplied time. Keep the original credential private when retaining this binding, and reverify it when using the evidence again. This value is not a reusable authorization permit.

Constants

FORMAT

Functions

sign_binding

Sign a public approval commitment before receiving the private credential. Both physical endpoint and credential subject prove possession; neither signature establishes root authority. Hosts verify the delegated Biscuit too.

verify

trusted_roots must be independently attached to expected_account_id. The binding never supplies its own trust list or authorizes a future call.

verify_possession

Check possession against the exact stored public approval. This alone is not authority: the host separately verifies the private credential and account.