pub fn verify_streamed_turn(
token: &SessionToken,
session_secret: &[u8],
challenge: &[u8],
challenge_at: i64,
challenge_sig: &HybridSignature,
session_context: &[u8],
stream_id: &[u8],
stream_seq: i64,
now: i64,
) -> VerifyResultExpand description
Fast-path verifier for streamed turns that present a SessionToken in place of the full cert chain. Checks HMAC, validity window, challenge freshness, and hybrid challenge signature against token.agent_pub_key. The chain is NOT re-verified — that’s the point of the token.