Initial commit: signed-object trust relay, verifier, and docs
- server: relay storing signed objects (PUT/GET), per-IP rate limiting,
per-subject quota (1000), one-response-per-request, pagination,
/v1/healthz /v1/readyz /v1/metrics
- verify: signature-verifying trust evaluator; every object is checked via
env.Verify(), approvals via VerifyApprovalResponse, revocations via
VerifyRevocationOf; k-of-n approval quorum
- docs: TRUST-MODEL.md and API.md describing issuer-anchored signatures and
the endpoint/status-code contract
- tests: server, verify, and ratelimit packages
Niko Marmeladkov
9d66003689
