pub fn verify_and_extract_box(
release_document_path: &Path,
options: &PrepareOptions<'_>,
) -> Result<PreparedBox>Expand description
Verifies and extracts one local box without executing any code from it.
The destination must not exist. Extraction happens in a fresh sibling directory so the final rename stays on one filesystem and exposes either the complete verified tree or nothing at all — a box is never observed half-installed.
§Errors
When the destination exists, the trust chain fails, the extracted size disagrees with the signed release, or the archive changed while it was being read.