pub const CHECKPOINT_DOMAIN: &[u8] = b"krabka-audit-ckpt-v1\0";
Versioned domain-separation prefix for checkpoint signatures.