Function pull_all_with 

pub fn pull_all_with(
    cwd: &Path,
    tx: &dyn Transport,
    remote: &str,
    target_branch: Option<&str>,
    require_signed: bool,
) -> Result<usize, DispatchError>

Fetch remote refs, then fast-forward the current local branch from refs/remotes/default/<branch>. Fresh repos with no local branch tip initialise from the current branch’s remote-tracking ref, or the first advertised remote branch when the current default branch is absent.

target_branch, when Some, overrides which remote branch to land on (used by mkit clone -b <branch>): the branch MUST exist among the remote’s advertised refs or the call fails with DispatchError::RemoteBranchMissing rather than silently falling back to another branch. None preserves the historical HEAD-driven selection used by plain pull.

require_signed gates the post-fetch commit/remix/tag signature check (issue #692) — true (the CLI’s default, see pull_all) verifies every newly-fetched object and fails closed; false is the explicit --no-verify-signatures / pull.require_signed = false opt-out.