verify

type Excluded struct {
	// Asset is the entry as it was resolved, which is what makes the exclusion
	// checkable: it is what 'ar2 test' takes.
	Asset *generate.Asset
	// Reason is what happened, in a line.
	Reason string
}

type Filled struct {
	// NeedsReview says the file can't be merged without somebody looking at it.
	NeedsReview bool
	// Unresolved names the environments whose entry points at a file the archive doesn't
	// hold, as "<os>/<arch>: <file>, <file>". They are also in Excluded; this is the
	// wording a pull request waiting for a definition is opened with.
	Unresolved []string
	// Excluded are the environments left out of the file, with the entry each had and
	// why it went. The file no longer says anything about them, so this is the only
	// record of what was tried.
	Excluded []*Excluded
	// Offered is how many environments the file is left offering. Zero is a version
	// there is nothing to publish for, and then the entries are left as they were
	// generated: what becomes of such a version is the caller's, and what it has to
	// work with is what was tried.
	Offered int
}

type Result struct {
	// Checksum is the SHA256 of the downloaded bytes. It is filled in whether or not
	// the release reported a digest, so a release published before GitHub started
	// reporting them still gets a checksum.
	Checksum string
	// Files is the files list to record. It is the input list when every src was
	// found, and a relocated one otherwise.
	Files []*generate.File
	// NeedsReview is set when resolving a src took a guess: the archive holds the file
	// under another name, holds that name more than once, or doesn't hold it at all. A
	// pull request carrying such a result must not be merged automatically.
	NeedsReview bool
	// Unresolved names the files that aren't anywhere in the archive.
	Unresolved []string
	// Holds is what the archive does hold, when something couldn't be resolved. It is the
	// one thing that says what the definition should have said, and the archive is gone as
	// soon as the run ends.
	Holds []string
	// LinkedLibc is the libc the executables need, read from the binaries. It is
	// empty when the asset holds nothing that can be read that way.
	LinkedLibc string
}

type Signatures interface {
	Check(ctx context.Context, logger *slog.Logger, pkgName, version string, asset *generate.Asset, path string) error
}

type StatusError struct {
	Code int
}

type Verifier struct {
	// contains filtered or unexported fields
}