pub fn verify_since(
repo: &Path,
scope: &Path,
base: Option<&str>,
) -> Result<Verification>Expand description
Verify the committed attestation at repo, optionally restricting the
“latest code commit” walk to the commits this branch introduced —
<base>..HEAD — instead of all reachable history (#319).
This makes freshness diff-relative rather than history-absolute, matching
the changed-line coverage/mutation gates (--base). When base is Some,
only commits reachable from HEAD but not base count as “the latest code
commit”: if this branch introduced no scoped code commit, there is nothing to
re-attest, so the result is Verification::Fresh regardless of what the
attestation names — a stale-on-base attestation (e.g. a squash merge
rewrote the attested commit into a new one on the base branch) never reds a
PR that didn’t touch the scoped source. When base is None, the walk
covers all reachable history, byte-identical to before this flag existed.