Module discovery 

Chain discovery strategies (SIGNATIF §7, §16).

A signature wrapper shall carry or reference the full delegation chain to a root anchor under one of three strategies:

• ChainDelivery::Embedded — the full chain inline, fully offline-capable;
• ChainDelivery::LogReference — transparency-log sequence pointers, resolved on first encounter (then cacheable);
• ChainDelivery::Hybrid — the immediate chain inline plus log references for freshness.

Structs

CachingResolver

A caching resolver decorator: first-encounter fetches go to the inner resolver, subsequent ones hit the cache — the §16 caching requirement for connected delivery.

LogRef

A pointer to a delegation credential stored in a transparency log.

Enums

ChainDelivery

How an artifact carries its delegation chain.

Traits

LogResolver

Resolves log references into certificate bytes. Production implementations bind to a transparency log client (the confium log-server /v1/certificates API); tests bind to in-memory fakes.

Functions

reconstruct_chain

Reconstruct the full certificate chain from a delivery strategy, using resolver only for non-embedded strategies.