signature.hpp File Reference

Trust is an adapter, not a dependency. More...

#include <pulp/authoring_capsule/status.hpp>
#include <pulp/runtime/result.hpp>
#include <cstdint>
#include <span>
#include <string>
#include <vector>

Go to the source code of this file.

Classes
struct	pulp::authoring_capsule::SignatureEnvelope
struct	pulp::authoring_capsule::VersionFloor
	Minimum version the signer will let this capsule be admitted at. More...
class	pulp::authoring_capsule::SignatureVerifier

Namespaces
namespace	pulp
namespace	pulp::authoring_capsule

Detailed Description

Trust is an adapter, not a dependency.

The substrate does not link a key store, a revocation feed, or a marketplace client. A consumer supplies one of these and keeps its own policy. That also keeps the honest boundary visible in code: a valid signature answers who, and nothing else. It never authorizes execution, never grants a redistribution right, and never turns an immutable Play install into an editable project.