Skip to main content

Module trust

Module trust 

Source
Expand description

Caller-supplied trust anchors for provenance verification.

Signature checks alone only prove a record is internally self-consistent: the key embedded in the record verifies the signature the record carries. Authenticity requires an independent trust decision — “do I trust the party that holds this key?”. A TrustStore is the set of keys/issuers the caller has decided to trust; verification is authentic only when the key that produced a signature is present in the store.

Structs§

TrustStore
A set of trusted Ed25519 verification keys.