Module verify 

Offline verification of an audit partition’s hash-chain and signed checkpoints.

The verifier reads <dir>/*.log segment files directly. It does NO recovery and NO truncation, so tail corruption stays visible. It recomputes the chain with the same primitives the writer used, and it validates each checkpoint signature against a trusted key. This file holds the report types and the segment walk; the per-record chain and checkpoint checks live in walk.

Structs

TrustedKeys

Trusted public keys, keyed by key_id.

VerifyBreak

First detected break in the chain or signatures.

VerifyLoss

A valid chain marker that declares fail-open audit loss.

VerifyReport

Result of a partition verification.

Functions

verify_partition_dir

Verify the audit partition under dir.