Module trust 

Host-supplied trust boundaries.

The Prover and Verifier are pure: key material, trusted checkpoint state, revocation, and policy all enter through these traits. Defaults are provided where the specification makes a check optional or deployment-defined.

Structs

DefaultPolicy

The permissive default policy.

Ed25519Signer

Ed25519 ArtifactSigner.

Ed25519Verifier

Ed25519 ArtifactVerifier.

InMemoryCheckpoints

An in-memory TrustedCheckpoint store, useful for tests and simple single-process deployments.

NoRevocation

No revocation configured.

Traits

ArtifactSigner

Signs PIC artifacts (COSE payloads and the JWS envelope) with one key.

ArtifactVerifier

Verifies a raw signature over raw bytes with one key.

RevocationCheck

Revocation state lookup. The default accepts everything; deployments enable it per the PIC Revocation Specification.

SettlementPolicy

Deployment policy hooks evaluated during settlement. Every method defaults to accepting, matching the checks the specification marks as profile- or deployment-required.

TrustedCheckpoint

The settlement authority’s knowledge of currently trusted checkpoints.