`ptwm_core::trust::org`

Org trust manifests — signed TOML files vouching for member author keys.

rsmod

ptwm_core::trust::org

mod org

Org trust manifests — signed TOML files vouching for member author keys.

Lifecycle: 1. Org publishes <manifest>.toml at a URL + a sibling <manifest>.toml.sig. 2. User runs `ptwm trust add --org <URL>`. 3. PTWM fetches both, verifies the manifest signature against `org.key`, parses members, adds the *org key* to the user's keyring; member keys are trusted transitively by the verifier when the contribution's pubkey matches a member. `fetch_and_verify` does the network work for tests we mock with a local file path (so this file's tests don't make HTTP calls).

rsfn

ptwm_core::trust::org::fetch_and_verify

crates/ptwm-core/src/trust/org.rs:94

pub fn fetch_and_verify(url: &str) -> Result<OrgManifest, ExtensionError>

Fetch the manifest and signature from a URL pair `(<url>, <url>.sig)`. Uses `ureq` (blocking) with a 30 s timeout. Returns the verified manifest.

rsfn

ptwm_core::trust::org::load_and_verify_files

crates/ptwm-core/src/trust/org.rs:115

pub fn load_and_verify_files(body_path: &Path, sig_path: &Path) -> Result<OrgManifest, ExtensionError>

Fixture-friendly variant: load body+sig from a local pair of files.

rstype

ptwm_core::trust::org::OrgHeader

crates/ptwm-core/src/trust/org.rs:33

pub struct OrgHeader

rstype

ptwm_core::trust::org::OrgManifest

crates/ptwm-core/src/trust/org.rs:24

pub struct OrgManifest

rstype

ptwm_core::trust::org::OrgMember

crates/ptwm-core/src/trust/org.rs:40

pub struct OrgMember

rstype

ptwm_core::trust::org::OrgScope

crates/ptwm-core/src/trust/org.rs:49

pub struct OrgScope