security/

Package credentials creates and validates typed credentials.

package publisheridentity owns publisher-held Ed25519 proofs.

package privatetrust captures public CA material for publisher-to-target TLS.

package visitorcert owns the shared client-certificate bounds and error.

package workloadproof defines the native exchange's key-possession proof.