@spec assemble_compact(BoundedAuthorityProtocol.V1.SigningInput.t(), binary()) ::
  {:ok, binary()} | {:error, :invalid}

Assembles a validated signing input and raw Ed25519 signature at profile maxima.

@spec assemble_compact(
  BoundedAuthorityProtocol.V1.SigningInput.t(),
  binary(),
  BoundedAuthorityProtocol.V1.Bounds.t() | map()
) :: {:ok, binary()} | {:error, :invalid}

Assembles a validated signing input and raw Ed25519 signature under caller bounds.

Builds the deterministic standard-JWS boundary-anchor signing input.

Checks a raw nonempty consumption-chain range against mandatory caller boundaries.

Verifies a raw grant-and-proof envelope against server-derived expected context.

Boundedly decodes a raw compact grant without evaluating trust.

Boundedly decodes a raw compact proof without evaluating trust.

Frames an exact deterministic anchored export after semantic validation.

Encodes one exact canonical consumption-chain row.

Builds the deterministic standard-JWS grant signing input.

Builds the deterministic standard-JWS historical-key-transition signing input.

Builds the deterministic standard-JWS holder-proof signing input.

Returns the canonical type-preserving request digest.

@spec untrusted_key_locator(binary(), BoundedAuthorityProtocol.V1.Bounds.t() | map()) ::
  {:ok, BoundedAuthorityProtocol.V1.KeyLocator.t()} | {:error, :invalid}

Parses only the protected grant header and returns its untrusted kid hint.

The complete compact input is bounded. Payload and signature segments are not decoded, interpreted, or independently size-checked.

Atomically verifies one raw anchored export against caller boundaries and key history.

Verifies one raw compact grant against caller-supplied trust and expected context.

Verifies one raw compact boundary anchor against one exact historical public key.

Verifies one raw compact authenticated historical-key transition.