Module prover 

PIC Prover (Profile 0.2, centralized settlement).

Builds one workload-signed advancement candidate from the current trusted checkpoint, per the Prover procedure of the specification:

1. validate the predecessor continuity state;
2. establish exactly one causal predecessor (predecessor.hash over the exact signed PIC PCA COSE bytes);
3. carry the Proof of Relationship required by the profile;
4. keep or attenuate the predecessor materialized authority — the candidate never states the resulting authority, the settlement authority materializes it;
5. bind the concrete request when required;
6. produce the candidate artifacts: Transition COSE → candidate Continuity COSE → candidate PIC Token JWT, all signed by the same PoR-bound workload key.

Structs

CandidateArtifacts

The three workload-signed candidate artifacts.

CandidateRequest

What the workload asks the next checkpoint to be.

Functions

build_candidate

Builds a candidate advancement from the exact signed bytes of the current trusted PIC PCA COSE checkpoint.