pub fn verify_scoped(repo: &Path, scope: &Path) -> Result<Verification>Expand description
Verify the e2e decision at repo, with scope (rather than all of repo)
defining what counts as scoped source.
repo and scope serve different roles: repo is where the receipts live
(the package root — a manifest’s own natural home), while scope is what
counts as “code” (the directory a path-scoped call actually named, which
can be narrower — a package root commonly also holds tests/, docs, and
config files that aren’t the attestable source). scope must be repo or
a descendant of it.
Equivalent to verify_since with no base.