osyra_ome.verify.bundle

Private pre-release / network boundary: The currently usable customer surface is offline verification of an existing signed artifact against an out-of-band trust anchor. Memory/network RPC APIs and host snippets on this page describe protocol and interface shape; the public Edge bridge, package publication, and release acceptance remain pending. Do not treat api.osyra.ai:443 examples as a released customer route.

client.verify.bundle_manifest — v0.2 stub.

Implementation deferred per design doc §3.3 phase table. v0.2 will:

• Open the .ome ZIP at the given path
• Read MANIFEST.cbor from the archive root
• Decode + verify its signature against the workspace public key (resolved via DID lookup or trust-anchor lookup)
• Iterate per-claim signatures and JMT inclusion proofs

Imports ONLY from ``osyra_ome.verify._kernel`` (BC-13 isolation guard).

Functions

verify_bundle_manifest

def verify_bundle_manifest(path: str) -> bool

Verify a `.ome` ZIP bundle manifest signature (v0.2).