mutualAuthVerifyTrustBundle
Verifies a TrustAnchorBundle's signature and freshness using a list of trusted publisher Ed25519 public keys, returning ok:true or a failure reason (untrusted_publisher, signature_invalid, bundle_expired, not_yet_valid).
Instructions
Verify a TrustAnchorBundle signature and freshness. Caller supplies the list of trusted publisher public keys (root configuration). Returns ok:true on success or failure reason (untrusted_publisher, signature_invalid, bundle_expired, not_yet_valid).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| bundle | No | TrustAnchorBundle to verify | |
| trusted_publisher_pubkeys_hex | Yes | List of Ed25519 pubkeys (hex) authorized to publish bundles | |
| now_ms | No | Current unix ms — defaults to Date.now() |