Module binary_attestation 

Binary attestation: verify that a spawned mur-agent-runtime carries a valid signature from MUR’s Developer ID team (launch-chain follow-on, spec 2026-08-12). Gated to release builds by the build marker.

Enums

AttestError

Constants

APPLE_TEAM_ID

MUR’s Apple Developer Team ID (empty in dev builds; build.rs panics if the marker is set without it).

IS_EMBEDDED_RELEASE

True when this binary was built with MUR_EMBED_RELEASE_MARKER=1 (the release pipeline). Dev builds never verify.

Functions

verify_runtime_signature

Verify path is a legitimate runtime binary. No-op unless this is a macOS release build. Fail-closed: any verification error is returned.