Deferred from Epic B (plan fn-145; tracks #200).
The KEL-native commit verifier asserts a single current key (kt==1) per delegated device for MVP (KeyState.current_keys.first() + a single-key assertion). Multi-key (kt>1) delegated devices need threshold-aware signature verification in the verdict path.
Related to the root-identity threshold work in #202 (kt≥2 + witness-receipted duplicity) — but this is the device / verify side. Epic: #200.
Deferred from Epic B (plan
fn-145; tracks #200).The KEL-native commit verifier asserts a single current key (
kt==1) per delegated device for MVP (KeyState.current_keys.first()+ a single-key assertion). Multi-key (kt>1) delegated devices need threshold-aware signature verification in the verdict path.Related to the root-identity threshold work in #202 (kt≥2 + witness-receipted duplicity) — but this is the device / verify side. Epic: #200.