Provider-neutral origin attached to a normalized Spectre input.
Optional channel and protocol packages use kind as their namespace and
mount as the concrete configured endpoint. Identifiers remain opaque to
the core. Trust is explicit and defaults to :untrusted; authentication
evidence and provenance never promote content on their own.
Summary
Functions
Returns the closed trust classes understood by the core.
Validates source evidence at trust and persistence boundaries.
Types
Functions
@spec trust_classes() :: [:untrusted | :trusted | :system]
Returns the closed trust classes understood by the core.
Validates source evidence at trust and persistence boundaries.
This is intentionally separate from new/1: checkpoint decoding can
reconstruct a struct without invoking its constructor, so consumers must be
able to re-establish the same invariants without raising.