@trylimbo/sdk-verifier 0.2.11-canary.18 → 0.2.11

package/gen/ffi/index.d.ts

@@ -181,7 +181,7 @@ declare const pointerLiteralSymbol: unique symbol;
  */
 declare const uniffiTypeNameSymbol: unique symbol;
 declare namespace trylimbo_verifier_d_exports {
-  export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierInterface, AssetVerifierLike, AssetVerifierOptions, Binder, BinderInterface, BinderLike, BinderPlugin, ByContent, ByReference, ClaimGeneratorInfo, Code, ContentBindingClass, ContentTrigger, Coordinate, CredentialOrigin, CredentialOrigin_Tags, DataSource, DeriveOptions, Detectors, Detectors_Tags, EndInclusivity, FieldViolation, FileSource, FileSourceInterface, FileSourceLike, FingerprintCheck, FingerprintCheck_Tags, FoundCredential, Frame, GoldenComparison, GoldenComparison_Tags, HardBinding, HashedUri, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, MemorySourceInterface, MemorySourceLike, PluginRead, PluginRegistry, PluginRegistryInterface, PluginRegistryLike, Range, RangeSource, RangeSourceImpl, RangeType, Recovery, RecoveryDiscovery, RecoveryDiscovery_Tags, RecoveryIssue, RecoveryIssueKind, RecoveryPolicy, RecoveryStatus, RecoverySummary, Region, RegionOfInterest, RegistryOptions, Relationship, ResourceRef, ReviewRating, Role, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKeySummary, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SimilarityScore, SoftBinding, StatusCodes, StreamValidation, StreamValidationInterface, StreamValidationLike, StreamVerifier, StreamVerifierInterface, StreamVerifierLike, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Value, VerifyOptions, c2paTrustList, c2paTsaTrustList, _default$1 as default, devCa, parse, resource, thumbnails };
+  export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierInterface, AssetVerifierLike, AssetVerifierOptions, Binder, BinderInterface, BinderLike, BinderPlugin, ByContent, ByReference, ClaimGeneratorInfo, Code, ContentBindingClass, ContentTrigger, Coordinate, CredentialOrigin, CredentialOrigin_Tags, DataSource, DeriveOptions, Detectors, Detectors_Tags, EndInclusivity, FieldViolation, FileSource, FileSourceInterface, FileSourceLike, FingerprintCheck, FingerprintCheck_Tags, FoundCredential, Frame, GoldenComparison, GoldenComparison_Tags, HardBinding, HashedUri, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, MemorySourceInterface, MemorySourceLike, PluginRead, PluginRegistry, PluginRegistryInterface, PluginRegistryLike, Range, RangeSource, RangeSourceImpl, RangeType, Recovery, RecoveryDiscovery, RecoveryDiscovery_Tags, RecoveryIssue, RecoveryIssue_Tags, RecoveryPolicy, RecoveryStatus, RecoverySummary, Region, RegionOfInterest, RegistryOptions, Relationship, ResourceRef, ReviewRating, Role, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKeySummary, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SimilarityScore, SoftBinding, StatusCodes, StreamValidation, StreamValidationInterface, StreamValidationLike, StreamVerifier, StreamVerifierInterface, StreamVerifierLike, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Value, Verdict, VerdictRule, Verdict_Tags, VerifyOptions, c2paTrustList, c2paTsaTrustList, _default$1 as default, devCa, parse, resource, thumbnails };
 }
 /**
  * Official C2PA Conformance Program signing-CA trust anchors (a compile-time
@@ -1989,73 +1989,570 @@ export declare enum RecoveryStatus {
    */
   Incomplete = 3
 }
+export declare enum RecoveryIssue_Tags {
+  Binder = "Binder",
+  DeprecatedAlgorithm = "DeprecatedAlgorithm",
+  BindingQuery = "BindingQuery",
+  QueryRefused = "QueryRefused",
+  ContentForm = "ContentForm",
+  ContentQuery = "ContentQuery",
+  Capabilities = "Capabilities",
+  ContentTooLarge = "ContentTooLarge",
+  CandidateFetch = "CandidateFetch",
+  CandidateValidation = "CandidateValidation",
+  EndpointRefused = "EndpointRefused",
+  ResourceLimit = "ResourceLimit"
+}
+/**
+ * Why registry recovery did not complete cleanly, or why one candidate was omitted while another
+ * succeeded. Kept as data so a partial recovery never loses the rest of the lookup outcome, and
+ * each kind carries exactly what it is about.
+ */
+export declare const RecoveryIssue: Readonly<{
+  instanceOf: (obj: any) => obj is RecoveryIssue;
+  Binder: {
+    new (inner: {
+      binderIndex: number;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.Binder;
+      readonly inner: Readonly<{
+        binderIndex: number;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      binderIndex: number;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.Binder;
+      readonly inner: Readonly<{
+        binderIndex: number;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.Binder;
+      readonly inner: Readonly<{
+        binderIndex: number;
+        message: string;
+      }>;
+    };
+  };
+  DeprecatedAlgorithm: {
+    new (inner: {
+      algorithm: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.DeprecatedAlgorithm;
+      readonly inner: Readonly<{
+        algorithm: string;
+      }>;
+    };
+    "new"(inner: {
+      algorithm: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.DeprecatedAlgorithm;
+      readonly inner: Readonly<{
+        algorithm: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.DeprecatedAlgorithm;
+      readonly inner: Readonly<{
+        algorithm: string;
+      }>;
+    };
+  };
+  BindingQuery: {
+    new (inner: {
+      binderIndex: number;
+      algorithm: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.BindingQuery;
+      readonly inner: Readonly<{
+        binderIndex: number;
+        algorithm: string;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      binderIndex: number;
+      algorithm: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.BindingQuery;
+      readonly inner: Readonly<{
+        binderIndex: number;
+        algorithm: string;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.BindingQuery;
+      readonly inner: Readonly<{
+        binderIndex: number;
+        algorithm: string;
+        message: string;
+      }>;
+    };
+  };
+  QueryRefused: {
+    new (inner: {
+      algorithm: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly inner: Readonly<{
+        algorithm: string;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      algorithm: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly inner: Readonly<{
+        algorithm: string;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly inner: Readonly<{
+        algorithm: string;
+        message: string;
+      }>;
+    };
+  };
+  ContentForm: {
+    new (inner: {
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentForm;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentForm;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentForm;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+  };
+  ContentQuery: {
+    new (inner: {
+      algorithm: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentQuery;
+      readonly inner: Readonly<{
+        algorithm: string;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      algorithm: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentQuery;
+      readonly inner: Readonly<{
+        algorithm: string;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentQuery;
+      readonly inner: Readonly<{
+        algorithm: string;
+        message: string;
+      }>;
+    };
+  };
+  Capabilities: {
+    new (inner: {
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.Capabilities;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.Capabilities;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.Capabilities;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+  };
+  ContentTooLarge: {
+    new (inner: {
+      capBytes: bigint;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentTooLarge;
+      readonly inner: Readonly<{
+        capBytes: bigint;
+      }>;
+    };
+    "new"(inner: {
+      capBytes: bigint;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentTooLarge;
+      readonly inner: Readonly<{
+        capBytes: bigint;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentTooLarge;
+      readonly inner: Readonly<{
+        capBytes: bigint;
+      }>;
+    };
+  };
+  CandidateFetch: {
+    new (inner: {
+      manifestId: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateFetch;
+      readonly inner: Readonly<{
+        manifestId: string;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      manifestId: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateFetch;
+      readonly inner: Readonly<{
+        manifestId: string;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateFetch;
+      readonly inner: Readonly<{
+        manifestId: string;
+        message: string;
+      }>;
+    };
+  };
+  CandidateValidation: {
+    new (inner: {
+      manifestId: string;
+      reason: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateValidation;
+      readonly inner: Readonly<{
+        manifestId: string;
+        reason: string;
+      }>;
+    };
+    "new"(inner: {
+      manifestId: string;
+      reason: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateValidation;
+      readonly inner: Readonly<{
+        manifestId: string;
+        reason: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateValidation;
+      readonly inner: Readonly<{
+        manifestId: string;
+        reason: string;
+      }>;
+    };
+  };
+  EndpointRefused: {
+    new (inner: {
+      manifestId: string;
+      endpoint: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.EndpointRefused;
+      readonly inner: Readonly<{
+        manifestId: string;
+        endpoint: string;
+      }>;
+    };
+    "new"(inner: {
+      manifestId: string;
+      endpoint: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.EndpointRefused;
+      readonly inner: Readonly<{
+        manifestId: string;
+        endpoint: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.EndpointRefused;
+      readonly inner: Readonly<{
+        manifestId: string;
+        endpoint: string;
+      }>;
+    };
+  };
+  ResourceLimit: {
+    new (inner: {
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ResourceLimit;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ResourceLimit;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ResourceLimit;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+  };
+}>;
 /**
  * Why registry recovery did not complete cleanly, or why one candidate was omitted while another
- * succeeded. Kept as data so a partial recovery never loses the rest of the lookup outcome.
- */
-export declare enum RecoveryIssueKind {
-  Binder = 0,
-  BindingQuery = 1,
-  QueryRefused = 2,
-  ContentQuery = 3,
-  Capabilities = 4,
-  ContentTooLarge = 5,
-  CandidateFetch = 6,
-  CandidateValidation = 7,
-  ResourceLimit = 8,
-  /**
-   * A match named a resolution API this verifier was not configured to fetch from.
-   */
-  EndpointRefused = 9
-}
-/**
- * One non-fatal recovery problem. `manifest_id` is present only for a returned candidate.
- */
-export type RecoveryIssue = {
-  kind: RecoveryIssueKind;
-  manifestId?: string;
-  message: string;
-};
-/**
- * Generated factory for {@link RecoveryIssue} record objects.
+ * succeeded. Kept as data so a partial recovery never loses the rest of the lookup outcome, and
+ * each kind carries exactly what it is about.
  */
-export declare const RecoveryIssue: Readonly<{
-  create: (partial: Partial<RecoveryIssue> & Required<Omit<RecoveryIssue, "manifestId">>) => RecoveryIssue;
-  new: (partial: Partial<RecoveryIssue> & Required<Omit<RecoveryIssue, "manifestId">>) => RecoveryIssue;
-  defaults: () => Partial<RecoveryIssue>;
-}>;
+export type RecoveryIssue = InstanceType<typeof RecoveryIssue['Binder' | 'DeprecatedAlgorithm' | 'BindingQuery' | 'QueryRefused' | 'ContentForm' | 'ContentQuery' | 'Capabilities' | 'ContentTooLarge' | 'CandidateFetch' | 'CandidateValidation' | 'EndpointRefused' | 'ResourceLimit']>;
 /**
- * Registry recovery outcome, including an unambiguous candidate, when one exists, and every
- * non-fatal issue encountered on the way.
+ * Registry recovery outcome and every non-fatal issue encountered on the way.
  */
 export type RecoverySummary = {
   status: RecoveryStatus;
-  /**
-   * Index into [`AssetVerification::credentials`]. Present only when recovery produced one
-   * candidate, or a golden comparison found the embedded active manifest exactly. Multiple
-   * soft-binding matches otherwise remain a list without an SDK-selected verdict.
-   */
-  bestCredentialIndex?: number;
   issues: Array<RecoveryIssue>;
 };
 /**
  * Generated factory for {@link RecoverySummary} record objects.
  */
 export declare const RecoverySummary: Readonly<{
-  create: (partial: Partial<RecoverySummary> & Required<Omit<RecoverySummary, "bestCredentialIndex">>) => RecoverySummary;
-  new: (partial: Partial<RecoverySummary> & Required<Omit<RecoverySummary, "bestCredentialIndex">>) => RecoverySummary;
+  create: (partial: Partial<RecoverySummary> & Required<Omit<RecoverySummary, never>>) => RecoverySummary;
+  new: (partial: Partial<RecoverySummary> & Required<Omit<RecoverySummary, never>>) => RecoverySummary;
   defaults: () => Partial<RecoverySummary>;
 }>;
 export declare enum GoldenComparison_Tags {
   NotRequested = "NotRequested",
   NoEmbeddedManifest = "NoEmbeddedManifest",
   NoRecoveredManifest = "NoRecoveredManifest",
+  RecoveryIncomplete = "RecoveryIncomplete",
   Matches = "Matches",
   Differs = "Differs",
-  Indeterminate = "Indeterminate"
+  NoneMatches = "NoneMatches",
+  Unreadable = "Unreadable"
 }
 /**
- * Typed completion of C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison.
+ * Typed completion of C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison:
+ * the local active manifest against what the registry holds. Every outcome is its own variant.
  */
 export declare const GoldenComparison: Readonly<{
   instanceOf: (obj: any) => obj is GoldenComparison;
@@ -2137,6 +2634,32 @@ export declare const GoldenComparison: Readonly<{
       readonly tag: GoldenComparison_Tags.NoRecoveredManifest;
     };
   };
+  RecoveryIncomplete: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
+      readonly tag: GoldenComparison_Tags.RecoveryIncomplete;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
+      readonly tag: GoldenComparison_Tags.RecoveryIncomplete;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
+      readonly tag: GoldenComparison_Tags.RecoveryIncomplete;
+    };
+  };
   Matches: {
     new (inner: {
       recoveredIndex: number;
@@ -2215,35 +2738,70 @@ export declare const GoldenComparison: Readonly<{
       }>;
     };
   };
-  Indeterminate: {
+  NoneMatches: {
     new (inner: {
-      recoveredIndex?: number;
+      candidates: Array<number>;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Indeterminate;
+      readonly tag: GoldenComparison_Tags.NoneMatches;
       readonly inner: Readonly<{
-        recoveredIndex?: number;
+        candidates: Array<number>;
       }>;
     };
-    new: (partial: Parameters<(partial: Partial<{
-      recoveredIndex?: number;
-    }> & Required<Omit<{
-      recoveredIndex?: number;
-    }, "recoveredIndex">>) => {
-      recoveredIndex?: number;
-    }>[0]) => {
+    "new"(inner: {
+      candidates: Array<number>;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
+      readonly tag: GoldenComparison_Tags.NoneMatches;
+      readonly inner: Readonly<{
+        candidates: Array<number>;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
+      readonly tag: GoldenComparison_Tags.NoneMatches;
+      readonly inner: Readonly<{
+        candidates: Array<number>;
+      }>;
+    };
+  };
+  Unreadable: {
+    new (inner: {
+      recoveredIndex: number;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
+      readonly tag: GoldenComparison_Tags.Unreadable;
+      readonly inner: Readonly<{
+        recoveredIndex: number;
+      }>;
+    };
+    "new"(inner: {
+      recoveredIndex: number;
+    }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Indeterminate;
+      readonly tag: GoldenComparison_Tags.Unreadable;
       readonly inner: Readonly<{
-        recoveredIndex?: number;
+        recoveredIndex: number;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2252,25 +2810,290 @@ export declare const GoldenComparison: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Indeterminate;
+      readonly tag: GoldenComparison_Tags.Unreadable;
       readonly inner: Readonly<{
-        recoveredIndex?: number;
+        recoveredIndex: number;
       }>;
     };
   };
 }>;
 /**
- * Typed completion of C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison.
+ * Typed completion of C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison:
+ * the local active manifest against what the registry holds. Every outcome is its own variant.
+ */
+export type GoldenComparison = InstanceType<typeof GoldenComparison['NotRequested' | 'NoEmbeddedManifest' | 'NoRecoveredManifest' | 'RecoveryIncomplete' | 'Matches' | 'Differs' | 'NoneMatches' | 'Unreadable']>;
+/**
+ * The evidence that singled a recovered verdict out.
  */
-export type GoldenComparison = InstanceType<typeof GoldenComparison['NotRequested' | 'NoEmbeddedManifest' | 'NoRecoveredManifest' | 'Matches' | 'Differs' | 'Indeterminate']>;
+export declare enum VerdictRule {
+  OnlyCandidate = 0,
+  /**
+   * Every other candidate is superseded by a credential in this report.
+   */
+  NotSuperseded = 1,
+  /**
+   * Its hash holds over these bytes and no other unsuperseded candidate's does.
+   */
+  HardBinding = 2
+}
+export declare enum Verdict_Tags {
+  Unsigned = "Unsigned",
+  Inconclusive = "Inconclusive",
+  Embedded = "Embedded",
+  Recovered = "Recovered",
+  RecoveredDerivative = "RecoveredDerivative",
+  Ambiguous = "Ambiguous"
+}
+/**
+ * What this verify concludes about the asset, chosen from [`AssetVerification::credentials`]
+ * on signed evidence alone. Policy over the evidence: no credential's validation state changes,
+ * and the list stays whole beside it.
+ *
+ * The embedded manifest is the verdict whenever the asset carries one that is not `Invalid`
+ * and the golden comparison does not contradict it. When it `differs` from what the registry
+ * holds, or several recovered candidates leave the comparison indeterminate, the embedded and
+ * the recovered manifests are reported as ambiguous: C2PA 2.4's substitution use case leaves
+ * that trust decision to the client. Otherwise a recovered candidate is named only when
+ * evidence singles it out: it is the only one, or the only one no other credential in this
+ * report supersedes (the successor's signed `parentOf` link), or the only one of those whose
+ * hard binding holds over these bytes. A registry score, a signature time or a position in the
+ * list is not evidence of which manifest belongs to these bytes, so candidates those alone would
+ * separate are reported as ambiguous.
+ */
+export declare const Verdict: Readonly<{
+  instanceOf: (obj: any) => obj is Verdict;
+  Unsigned: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Unsigned;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Unsigned;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Unsigned;
+    };
+  };
+  Inconclusive: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Inconclusive;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Inconclusive;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Inconclusive;
+    };
+  };
+  Embedded: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Embedded;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Embedded;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Embedded;
+    };
+  };
+  Recovered: {
+    new (inner: {
+      index: number;
+      decidedBy: VerdictRule;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Recovered;
+      readonly inner: Readonly<{
+        index: number;
+        decidedBy: VerdictRule;
+      }>;
+    };
+    "new"(inner: {
+      index: number;
+      decidedBy: VerdictRule;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Recovered;
+      readonly inner: Readonly<{
+        index: number;
+        decidedBy: VerdictRule;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Recovered;
+      readonly inner: Readonly<{
+        index: number;
+        decidedBy: VerdictRule;
+      }>;
+    };
+  };
+  RecoveredDerivative: {
+    new (inner: {
+      index: number;
+      decidedBy: VerdictRule;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.RecoveredDerivative;
+      readonly inner: Readonly<{
+        index: number;
+        decidedBy: VerdictRule;
+      }>;
+    };
+    "new"(inner: {
+      index: number;
+      decidedBy: VerdictRule;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.RecoveredDerivative;
+      readonly inner: Readonly<{
+        index: number;
+        decidedBy: VerdictRule;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.RecoveredDerivative;
+      readonly inner: Readonly<{
+        index: number;
+        decidedBy: VerdictRule;
+      }>;
+    };
+  };
+  Ambiguous: {
+    new (inner: {
+      candidates: Array<number>;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Ambiguous;
+      readonly inner: Readonly<{
+        candidates: Array<number>;
+      }>;
+    };
+    "new"(inner: {
+      candidates: Array<number>;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Ambiguous;
+      readonly inner: Readonly<{
+        candidates: Array<number>;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Ambiguous;
+      readonly inner: Readonly<{
+        candidates: Array<number>;
+      }>;
+    };
+  };
+}>;
 /**
- * Complete asset verification result, including conclusive/incomplete recovery state and the
- * C2PA golden-flow comparison against the strongest recovered credential.
+ * What this verify concludes about the asset, chosen from [`AssetVerification::credentials`]
+ * on signed evidence alone. Policy over the evidence: no credential's validation state changes,
+ * and the list stays whole beside it.
+ *
+ * The embedded manifest is the verdict whenever the asset carries one that is not `Invalid`
+ * and the golden comparison does not contradict it. When it `differs` from what the registry
+ * holds, or several recovered candidates leave the comparison indeterminate, the embedded and
+ * the recovered manifests are reported as ambiguous: C2PA 2.4's substitution use case leaves
+ * that trust decision to the client. Otherwise a recovered candidate is named only when
+ * evidence singles it out: it is the only one, or the only one no other credential in this
+ * report supersedes (the successor's signed `parentOf` link), or the only one of those whose
+ * hard binding holds over these bytes. A registry score, a signature time or a position in the
+ * list is not evidence of which manifest belongs to these bytes, so candidates those alone would
+ * separate are reported as ambiguous.
+ */
+export type Verdict = InstanceType<typeof Verdict['Unsigned' | 'Inconclusive' | 'Embedded' | 'Recovered' | 'RecoveredDerivative' | 'Ambiguous']>;
+/**
+ * Complete asset verification result: every credential, the recovery state, the C2PA
+ * golden-flow comparison, and the verdict the SDK's rules choose. See [`asset::Verdict`].
  */
 export type AssetVerification = {
   credentials: Array<FoundCredential>;
   recovery: RecoverySummary;
   goldenComparison: GoldenComparison;
+  verdict: Verdict;
 };
 /**
  * Generated factory for {@link AssetVerification} record objects.
@@ -2289,11 +3112,12 @@ export type RegistryOptions = {
    */
   url: string;
   /**
-   * Federated resolution APIs a match may name as holding its manifest. C2PA 2.4 lets a
-   * match carry an `endpoint`; one listed here is fetched from, any other is reported as
-   * refused. Checked like `url`: https, or http on loopback only.
+   * Federated resolution APIs a match may name as holding its manifest, beside the ones the
+   * C2PA algorithm list publishes, which are always allowed. C2PA 2.4 lets a match carry an
+   * `endpoint`; one allowed is fetched from, any other is reported as refused. Checked like
+   * `url`: https, or http on loopback only.
    */
-  endpoints?: Array<string>;
+  endpoints: Array<string>;
 };
 /**
  * Generated factory for {@link RegistryOptions} record objects.
@@ -2705,7 +3529,7 @@ export declare enum RecoveryPolicy {
    * It queries the registry on every verify, without making it load-bearing on the asset's own
    * credential: the flow provides information about a substitution rather than gating the local
    * manifest, so a registry that cannot be reached leaves [`RecoveryStatus::Incomplete`], the
-   * reason as a [`RecoveryIssue`], and [`GoldenComparison::Indeterminate`]. A caller for whom a
+   * reason as a [`RecoveryIssue`], and [`GoldenComparison::RecoveryIncomplete`]. A caller for whom a
    * cross-check that never ran must not pass for agreement branches on that status.
    */
   Always = 1
@@ -3511,7 +4335,7 @@ export type SegmentValidation = InstanceType<typeof SegmentValidation['Init' | '
  */
 export interface AssetVerifierLike {
   /**
-   * Verify an asset from a [`RangeSource`] using the per-call binders and recovery plan.
+   * Verify an asset from a [`RangeSource`] using the per-call binders and recovery options.
    * `plugins` carries the caller's
    * plugins for non-c2pa formats (e.g. MXF); pass an empty `PluginRegistry` for a
    * built-in C2PA media format. The SDK links no plugin itself. Returns embedded/recovered
@@ -3548,7 +4372,7 @@ export declare class AssetVerifier extends UniffiAbstractObject implements Asset
    */
   static create(options: AssetVerifierOptions): AssetVerifierLike;
   /**
-   * Verify an asset from a [`RangeSource`] using the per-call binders and recovery plan.
+   * Verify an asset from a [`RangeSource`] using the per-call binders and recovery options.
    * `plugins` carries the caller's
    * plugins for non-c2pa formats (e.g. MXF); pass an empty `PluginRegistry` for a
    * built-in C2PA media format. The SDK links no plugin itself. Returns embedded/recovered
@@ -4153,13 +4977,6 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): RecoveryIssue;
       lower(value: RecoveryIssue, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeRecoveryIssueKind: {
-      readFromCursor(c: Cursor): RecoveryIssueKind;
-      writeIntoCursor(value: RecoveryIssueKind, c: Cursor): void;
-      allocationSize(value: RecoveryIssueKind): number;
-      lift(value: UniffiByteArray): RecoveryIssueKind;
-      lower(value: RecoveryIssueKind, alloc: RustBufferAllocator): UniffiByteArray;
-    };
     FfiConverterTypeRecoveryPolicy: {
       readFromCursor(c: Cursor): RecoveryPolicy;
       writeIntoCursor(value: RecoveryPolicy, c: Cursor): void;
@@ -4395,6 +5212,20 @@ declare const _default$1: Readonly<{
       lower(value: ValidationStatus, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeValue: FfiConverter<UniffiByteArray, string>;
+    FfiConverterTypeVerdict: {
+      readFromCursor(c: Cursor): Verdict;
+      writeIntoCursor(value: Verdict, c: Cursor): void;
+      allocationSize(value: Verdict): number;
+      lift(value: UniffiByteArray): Verdict;
+      lower(value: Verdict, alloc: RustBufferAllocator): UniffiByteArray;
+    };
+    FfiConverterTypeVerdictRule: {
+      readFromCursor(c: Cursor): VerdictRule;
+      writeIntoCursor(value: VerdictRule, c: Cursor): void;
+      allocationSize(value: VerdictRule): number;
+      lift(value: UniffiByteArray): VerdictRule;
+      lower(value: VerdictRule, alloc: RustBufferAllocator): UniffiByteArray;
+    };
     FfiConverterTypeVerifyOptions: {
       readFromCursor(c: Cursor): VerifyOptions;
       writeIntoCursor(value: VerifyOptions, c: Cursor): void;