signvalidator

type Config struct {
	// ClockSkewTolerance is the maximum future drift allowed for the `created`
	// field. nil means use the spec default (5 s). Set to a zero-value pointer
	// (&0) to enforce strict same-second validation. NFOs may override this
	// per-subnet via the plugin config key "clockSkewToleranceSeconds".
	// The `expires` field always uses zero tolerance regardless of this value.
	ClockSkewTolerance *time.Duration
}