Module verification 

Chain verification, constraint checking, and binding integrity validation.

Structs

ChainVerificationResult

Result of verifying the credential chain (L1 → L2 → optional L3).

ConstraintCheckResult

Result of evaluating a single constraint against fulfillment data.

VerifiedCredentialChain

A credential chain whose signatures, bindings and headers have been verified.

VerifiedMandatePair

A checkout and payment mandate pair, paired and verified together, with the fulfillment derived from the verified L3 layers.

Enums

StrictnessMode

Controls behavior when an unknown constraint type is encountered.

Functions

check_constraints

Evaluate all constraints against fulfillment data.

infer_mode_from_vct

Infer the execution mode from mandate VCT values.

verify_checkout_hash_binding

Verify checkout_hash is B64U(SHA-256(ASCII(checkout_jwt))).

verify_l3_cross_reference

Verify that L3a transaction_id equals L3b checkout_hash.

verify_sd_hash_binding

Verify that expected_hash equals B64U(SHA-256(ASCII(serialized_parent))).

verify_timestamps

Verify iat and exp claims with a 300-second clock skew tolerance.