Module signing 

Ed25519 checkpoint signing for the audit hash-chain.

checkpoint_signing_bytes defines the canonical signed payload. The writer calls it to sign, and the verifier calls it to verify. Never reimplement it.

Structs

FileEd25519Signer

File-backed Ed25519 signer that reads a PKCS#8 v2 DER key.

FreezeSigningInput

The freeze fields shared by the broker and operator CLI. Both sides encode these fields independently into the signed wire payload.

FreezeSigningInputBuilder

Use builder syntax to set the inputs and finish with call().

Constants

CHECKPOINT_DOMAIN

Versioned domain-separation prefix for checkpoint signatures.

Functions

checkpoint_signing_bytes

Canonical checkpoint signed payload.

freeze_signing_input

Project the signed values from a described freeze returned by the broker.

verify_signature

Verify an Ed25519 signature.