Expand description
Constraint evaluation — mirrors Go’s constraints.go exactly.
Every semantic must produce the same verdict for the same inputs, or cross-language conformance fails.
Functions§
- evaluate_
constraints - Run every Constraint on cert against the caller-supplied VerifierContext.
Return
Ok(())iff all pass; an error string otherwise. Fail-closed: unknown Type or missing required context field causes rejection. (SPEC §17.7) Unknown built-in types fall through toext_evaluatorsbefore failing closed.