pub fn assert_box_manifest_agreement(
box_manifest: &BoxManifest,
release: &ReleaseManifest,
) -> Result<()>Expand description
Binds the self-description inside the archive to the signed release outside it.
Only fields present in both schema-version-2 documents belong here. Release-only transport data
has no counterpart in box.json; every shared identity, target, layout, self-test, environment,
asset-policy and provenance field must agree. Without this, a correctly hashed archive could be
paired with a signed manifest describing something else entirely.
ยงErrors
When any shared field differs, naming the first one that does.