Function verify_binding 

pub fn verify_binding(
    policy: &RevocationPolicy,
    source: &dyn GrantBindingSource,
    credential: &[u8],
    holder: &[u8],
) -> Result<GrantDecisionBinding, RevocationRefusal>

Verifies the binding for credential, presented by holder, against policy (ACCESS-005 R1).

The seam authenticates it, then its issuer, audience, holder and exact canonical pass digest must each equal what was presented, and every bound must hold, before any dependency is used.

Errors

RevocationRefusal::BindingMissing when the seam has no binding, or any comparison or bound fails: a substituted, partial or over-bound binding is refused, never repaired.