Module signatif 

SIGNATIF deployment manifests (SIGNATIF §18–19).

A deployment manifest declares the whole trust topology declaratively and is signed by the root trust authority whose deployment it describes:

• the topology profile (hierarchical, federated, cross-recognized, mesh) — one of the four first-class conformance profiles;
• every trust authority with its identifier, aggregate key or fingerprint, quorum parameters, parent references, and scope;
• the algorithms recognized by the deployment, from the framework’s algorithm registry, plus the migration phase;
• the recognized transparency logs and mirrors, with the multi-log attestation policy;
• mutual-recognition credentials between roots (governance).

Validation enforces: a valid trust graph with no cycles, the monotonic scope narrowing invariant across every delegation link, quorum consistency (1 <= T <= N; M <= K), and semantic versioning.

Structs

AuthorityDeclaration

One declared trust authority.

CrossRecognition

A mutual-recognition credential: one root attesting another (§19 mutual-recognition), recorded in both roots’ logs.

LogDeclaration

One recognized transparency log or mirror.

MultiLogPolicyDeclaration

The multi-log attestation policy.

SignatifManifest

A root-signed declarative deployment manifest (§18).

Enums

MigrationPhase

The post-quantum migration phase (§20 migration-declaration).

TopologyProfile

The four trust topology profiles (§19 topology-declaration).