Module auth 

Authentication modules.

Phase 1 ships NIP-98 structural verification (tag layout, URL/method/payload match, timestamp tolerance). Schnorr signature verification is the nip98-schnorr feature on nip98. Sprint 11 adds self_signed — the Controlled Identifier verifier abstraction (row 152) used to fan out across did:key, NIP-98, did:nostr, etc.

Modules

nip98

NIP-98 HTTP authentication: structural + cryptographic verification.

replay_store

The ReplayStore seam (ADR-060 Decision 2): the single-use-nonce contract extracted from the reference cache so every tier consumes one named semantics rather than re-deriving replay handling. Carries no runtime dependency, so the pure-logic core surface (wasm32 / CF-Workers) can depend on it and supply its own implementor. The ReplayStore seam (ADR-060 Decision 2).

self_signed

Self-signed proof verifier abstraction (Sprint 11 row 152).