Module verification 

Chain verification, constraint checking, and binding integrity validation.

Structs

ChainVerificationResult

Result of verifying the credential chain (L1 → L2 → optional L3).

ConstraintCheckResult

Result of evaluating a single constraint against fulfillment data.

Enums

StrictnessMode

Controls behavior when an unknown constraint type is encountered.

Functions

check_constraints

Evaluate all constraints against fulfillment data.

infer_mode_from_vct

Infer the execution mode from mandate VCT values.

verify_checkout_hash_binding

Verify checkout_hash is B64U(SHA-256(ASCII(checkout_jwt))).

verify_l3_cross_reference

Verify that L3a transaction_id equals L3b checkout_hash.

verify_sd_hash_binding

Verify that expected_hash equals B64U(SHA-256(ASCII(serialized_parent))).

verify_timestamps

Verify iat and exp claims with a 300-second clock skew tolerance.