Module model 

The signed org-policy artifact (GL #674).

OrgPolicyV1 is how an organisation distributes one central, signed policy pack to every endpoint. The admin authors a normal pack (crate::core::policy::PolicyPack), wraps its TOML source in this artifact and Ed25519-signs it; clients that have pinned the org’s public key (super::trust) verify the signature offline before the runtime folds the pack in as an un-bypassable floor (crate::core::policy::floor).

Signing mirrors crate::core::savings_ledger::signed_batch and the compliance report: the two signature fields are cleared while computing the canonical bytes, so a verifier reproduces the exact signed payload from the artifact alone. The authoritative content is pack_toml — the verbatim pack source — which every client re-parses and re-validates itself, so a tampered pack body fails both validation and the signature.

Structs

OrgPolicyV1

A signed, centrally distributed org policy.

OrgVerifyResult

Outcome of verifying an OrgPolicyV1 signature — offline, no network.

Constants

KIND

SCHEMA_VERSION