import type { EvidenceCommitment } from '../../types/bilateral-receipt.js'; /** * An EvidenceCommitment narrowed to the producer-attestation kind. Rides * on BilateralReceipt.evidenceCommitments inside the signed body, like any * other commitment. credentialHash carries the sha256 (lowercase hex) of * the attestation bytes; the attestation itself is never embedded. */ export interface ProducerAttestationCommitment extends EvidenceCommitment { type: 'producer_attestation'; /** Format identifier, an open set: e.g. 'eat+jwt', 'tee-quote', a vendor * report label. Opaque to APS; meaningful to the relying party's tooling. */ attestationFormat: string; /** Where a relying party can fetch the attestation bytes. Optional; the * hash binding stands on its own. */ locatorUri?: string; /** Free-text note of what the attestation covers, e.g. producer identity, * code measurement, environment. A note, not a taxonomy. */ bindingNote?: string; } /** * The CPA-side reference to the same external attestation, in the CPA's * snake_case field style. Carried on the optional producer_attestation * slot of a ContextProvenanceAttestation and signed with it. */ export interface CpaProducerAttestationRef { /** Format identifier, an open set: e.g. 'eat+jwt', 'tee-quote'. */ format: string; /** sha256, lowercase hex, of the attestation bytes. */ content_hash: string; /** Where a relying party can fetch the attestation bytes. */ locator_uri?: string; /** Free-text note of what the attestation covers. */ binding_note?: string; } /** Validation outcome. Fail closed: violations make the value invalid. */ export interface ProducerAttestationValidation { valid: boolean; /** Human-readable rule violations, empty iff valid. */ reasons: string[]; } //# sourceMappingURL=types.d.ts.map