mutualAuthVerifyTrustBundle
Verify a TrustAnchorBundle’s signature and validity period using a list of trusted publisher public keys, ensuring authenticity and timeliness.
Instructions
Verify a TrustAnchorBundle signature and freshness. Caller supplies the list of trusted publisher public keys (root configuration). Returns ok:true on success or failure reason (untrusted_publisher, signature_invalid, bundle_expired, not_yet_valid).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| bundle | No | TrustAnchorBundle to verify | |
| now_ms | No | Current unix ms — defaults to Date.now() | |
| trusted_publisher_pubkeys_hex | Yes | List of Ed25519 pubkeys (hex) authorized to publish bundles |