confium_signatif/lib.rs
1//! # confium-signatif
2//!
3//! Implementation of the SIGNATIF framework — Sealed Interoperable
4//! Graduated Non-repudiable Anchored Trust Infrastructure Framework
5//! (ISO/TC 154 working draft) — on top of the Confium cryptographic
6//! substrate.
7//!
8//! SIGNATIF is the framework, Confium is the implementation tool, and a
9//! domain scheme (for example CNML for metrology) adopts the framework
10//! through this crate:
11//!
12//! - [`graph`]: the trust graph (delegation DAG) and path-finding that
13//! collects every valid verification path.
14//! - [`bundle`]: versioned, signed trust anchor bundles.
15//! - [`scope`]: the multi-dimensional scope lattice with monotonic
16//! narrowing.
17//! - [`artifact`]: trusted artifacts with dimension-tagged co-signature
18//! blocks over one canonical payload hash.
19//! - [`pipeline`]: the ordered hard/soft check verification pipeline,
20//! [`coverage`] reports, classification and acceptance policies.
21//! - [`revocation`]: signed CRLs, hash bindings, transitive propagation.
22//! - [`ceremony`]: verifiable ceremony transcripts and their audit.
23//! - [`registry`]: the five scheme-maintained registries.
24//! - [`verify`]: the deep verification entry — fleet, options, and
25//! verdict in one interface, so transport adapters stay thin.
26//! - [`testing`]: specimen builders every test surface composes from.
27//!
28//! All verification is offline-capable against a trust anchor bundle.
29
30#![forbid(unsafe_code)]
31#![warn(missing_docs)]
32
33pub mod artifact;
34pub mod bundle;
35pub mod ceremony;
36pub mod conditions;
37pub mod conformance;
38pub mod cose;
39pub mod coverage;
40pub mod discovery;
41pub mod error;
42pub mod fta;
43pub mod graph;
44pub mod jcs;
45pub mod jws;
46pub mod multilog;
47pub mod passport;
48pub mod pipeline;
49pub mod registry;
50pub mod revocation;
51pub mod scope;
52pub mod testing;
53pub mod time;
54pub mod verify;
55pub mod x509;
56
57pub use error::{SignatifError, SignatifResult};
58pub use verify::{Fleet, Verdict, VerifyOptions, verify_trusted_artifact};