Crate confium_signatif 

confium-signatif

Implementation of the SIGNATIF framework — Sealed Interoperable Graduated Non-repudiable Anchored Trust Infrastructure Framework (ISO/TC 154 working draft) — on top of the Confium cryptographic substrate.

SIGNATIF is the framework, Confium is the implementation tool, and a domain scheme (for example CNML for metrology) adopts the framework through this crate:

• graph: the trust graph (delegation DAG) and path-finding that collects every valid verification path.
• bundle: versioned, signed trust anchor bundles.
• scope: the multi-dimensional scope lattice with monotonic narrowing.
• artifact: trusted artifacts with dimension-tagged co-signature blocks over one canonical payload hash.
• pipeline: the ordered hard/soft check verification pipeline, coverage reports, classification and acceptance policies.
• revocation: signed CRLs, hash bindings, transitive propagation.
• ceremony: verifiable ceremony transcripts and their audit.
• registry: the five scheme-maintained registries.
• verify: the deep verification entry — fleet, options, and verdict in one interface, so transport adapters stay thin.
• testing: specimen builders every test surface composes from.

All verification is offline-capable against a trust anchor bundle.

Re-exports

pub use error::SignatifError;

pub use error::SignatifResult;

pub use verify::Fleet;

pub use verify::Verdict;

pub use verify::VerifyOptions;

pub use verify::verify_trusted_artifact;

Modules

artifact

Trusted artifacts and dimension-tagged co-signatures (SIGNATIF §8).

bundle

Trust anchor bundles (SIGNATIF §7, Annex E).

ceremony

Ceremony records (SIGNATIF §17).

conditions

Executable scope conditions (SIGNATIF §11 scope-conditions).

conformance

Conformance classes and the abstract test suite mapping (SIGNATIF §6, Annex A).

cose

COSE encoding of trusted artifacts (SIGNATIF §8, the /conf/format-cose profile’s co-signature encoding obligation).

coverage

Coverage reports and trust classification (SIGNATIF §14).

discovery

Chain discovery strategies (SIGNATIF §7, §16).

error

Errors for the SIGNATIF framework implementation.

fta

Federated trust authorities and nested threshold (SIGNATIF §10).

graph

The trust graph: delegation DAG and verification path-finding (SIGNATIF §7).

jcs

RFC 8785 JSON Canonicalization Scheme (JCS).

jws

The JWS format profile (SIGNATIF §8, Annex E): JSON Web Signature, compact serialization, detached content (RFC 7515).

multilog

Multi-log attestation and gossip quorum (SIGNATIF §13).

passport

Delivery formats: passports and challenge-response (SIGNATIF §16).

pipeline

The verification pipeline (SIGNATIF §14).

registry

The five scheme-maintained registries (SIGNATIF Annex C).

revocation

Revocation semantics (SIGNATIF §12).

scope

The multi-dimensional authorization scope lattice (SIGNATIF §11).

testing

Specimen builders for the abstract test suite.

time

The time dimension: external time anchoring (SIGNATIF §8.8).

verify

The deep verification entry: one interface for every surface.

x509

X.509 bridge: scopes in certificate extensions (SIGNATIF §11, scope-encoding and the four-layer scope enforcement).