sign

type Class string

type IdentityConstraints struct {
	Issuer  string
	Subject string
}

type Op string

type SignOptions struct {
	MultiArch     bool
	PredicatePath string
	PredicateType string // attestation predicate type (e.g. "slsaprovenance"); caller-set, never executor-defaulted
}

type SignPlan struct {
	// ── Trust requirements (what must be true) ──
	TrustClass               Class
	TransparencyRequired     bool // the signature must be recorded in a transparency log
	RequiresPhysicalPresence bool // the signer must demonstrate physical presence
	RequiresNonExportableKey bool // the signing key must be hardware-bound / non-exportable
	Identity                 IdentityConstraints

	// ── Logical references (bound to keys/URIs only at render time) ──
	KeyRef    string // key class: "path" or "env:VAR"
	KMSRef    string // kms class: a logical ref, bound to a URI by the renderer
	PKCS11Ref string // hardware class: a logical ref → pkcs11: URI via SF_PKCS11_<REF> (absent = FIDO2 --sk)

	// ── Execution modifier (kept distinct so policy logic never leaks here) ──
	Attestation bool // also emit a provenance attestation
}