Function verify_trusted_artifact 

pub fn verify_trusted_artifact(
    artifact: &TrustedArtifact,
    bundle: &TrustAnchorBundle,
    graph: &TrustGraph,
    registry: &Registry,
    options: &VerifyOptions,
) -> SignatifResult<Verdict>

Verify one trusted artifact through the full pipeline.

This is the single entry every transport adapter calls; the pipeline assembly (fleet, revocation view, transparency inputs, acceptance policy) lives here and nowhere else.

Errors

Input decoding failures (including a malformed time_attested_at) and hard-check failures surface as SignatifError; the error names the failing check.