Complete protocol-00 envelope facts after every selected signature succeeds.
signatures maps labels to RequestSeal.Verification; each records the exact
profile revision and either an agent principal with trusted source provenance
or a held-key thumbprint. evidence records inner labels whose entire component
sets the outer signature covers, without implying delegation or authorization.
ignored contains labels outside this profile. replay is one whole-envelope
receipt or :not_required; authorization is always :not_evaluated.
Inspection omits principals, key IDs, parameters, and source URLs.
Summary
Types
@type t() :: %RequestSeal.WebBotAuth.Verification{ authorization: :not_evaluated, evidence: %{required(binary()) => [binary()]}, ignored: [binary()], profile: map(), replay: :not_required | RequestSeal.Replay.Receipt.t(), signatures: %{required(binary()) => RequestSeal.Verification.t()} }