@trylimbo/sdk-verifier 0.2.24 → 0.2.25-canary.37

package/gen/ffi/index.d.ts

@@ -181,20 +181,33 @@ declare const pointerLiteralSymbol: unique symbol;
  */
 declare const uniffiTypeNameSymbol: unique symbol;
 declare namespace trylimbo_verifier_d_exports {
-  export { Actor, AssertionMetadata, AssetFormat, AssetFormat_Tags, AssetType, AssetVerification, AssetVerifier, AssetVerifierInterface, AssetVerifierLike, AssetVerifierOptions, Binder, BinderImpl, ByContent, ByReference, ClaimGeneratorInfo, Code, ContentBindingClass, ContentTrigger, Coordinate, Credential, CredentialOrigin, CredentialOrigin_Tags, DataSource, DeriveOptions, EndInclusivity, FieldViolation, FileSource, FileSourceInterface, FileSourceLike, FingerprintCheck, FingerprintCheck_Tags, Frame, GoldenComparison, GoldenComparison_Tags, HardBinding, HashedUri, HeldBinder, HeldBinderInterface, HeldBinderLike, Ingredient, IngredientDeltaValidationResult, InitValidation, IsccBinder, IsccBinderInterface, IsccBinderLike, Item, JsonValue, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, MemorySourceInterface, MemorySourceLike, PluginReader, Range, RangeSource, RangeSourceImpl, RangeType, Recovery, RecoveryDiscovery, RecoveryDiscovery_Tags, RecoveryIssue, RecoveryIssue_Tags, RecoveryStatus, RecoverySummary, RecoveryTrigger, Region, RegionOfInterest, Relationship, Repository, Repository_Tags, ResourceRef, ReviewRating, Role, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKeySummary, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SimilarityScore, SoftBinding, StatusCodes, StreamSession, StreamSessionInterface, StreamSessionLike, StreamVerifier, StreamVerifierInterface, StreamVerifierLike, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Verdict, VerdictRule, Verdict_Tags, c2paTrustList, c2paTsaTrustList, _default$1 as default, devCa, parse, resource, thumbnails };
+  export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierInterface, AssetVerifierLike, AssetVerifierOptions, Block, ByteRange, ClaimGeneratorInfo, Code, Compute, ComputeImpl, ComputeRequest, Content, ContentWhen, Coordinate, Credential, CredentialInterface, CredentialLike, CredentialOrigin, CredentialOrigin_Tags, DataSource, Discovery, DiscoveryVia, DiscoveryVia_Tags, EndInclusivity, FieldViolation, FileSource, FileSourceInterface, FileSourceLike, FingerprintCheck, FingerprintCheck_Tags, Frame, Golden, Golden_Tags, HardBinding, HashedUri, Hint, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, JsonValue, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, MemorySourceInterface, MemorySourceLike, PluginReader, Range, RangeSource, RangeSourceImpl, RangeType, Recovery, RecoveryIssue, RecoveryIssue_Tags, RecoveryStatus, RecoverySummary, RecoveryTrigger, Reference, RegionOfInterest, Relationship, Repository, Repository_Tags, ResourceRef, ReviewRating, Role, Scope, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKey, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SimilarityScore, SoftBindingSource, SoftBindingSource_Tags, SoftBindingType, StatusCodes, StreamSession, StreamSessionInterface, StreamSessionLike, StreamVerifier, StreamVerifierInterface, StreamVerifierLike, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, Timespan, Trust, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Verdict, VerdictRule, Verdict_Tags, c2paTrustList, c2paTsaTrustList, computeSoftBinding, _default$1 as default, devCa, parse, resource };
 }
 /**
- * Official C2PA Conformance Program signing-CA trust anchors (a compile-time
- * snapshot). Trusted by default already; exposed for callers pinning their own list.
+ * The bundled C2PA Conformance Program signing-CA trust list (a release snapshot). Trusted by
+ * default with `Trust.c2pa`; read it to pin or extend your own list.
  */
 export declare function c2paTrustList(): string;
 /**
- * Official C2PA time-stamping-authority (TSA) trust anchors (a compile-time snapshot).
+ * The bundled C2PA time-stamping-authority trust list (a release snapshot).
  */
 export declare function c2paTsaTrustList(): string;
+/**
+ * The values this SDK computes for `alg` over an asset, `[]` when it finds none. `format` is
+ * the asset's media type; omitted, the bytes name it.
+ *
+ * # Errors
+ *
+ * An algorithm this SDK computes no value of, a `format` that is no media type or that the bytes
+ * contradict, an unreadable source, or no trustworthy answer.
+ */
+export declare function computeSoftBinding(alg: string, source: RangeSource, format?: string | undefined, asyncOpts_?: {
+  signal: AbortSignal;
+}): Promise<Array<Block>>;
 /**
  * PEM trust anchor for the Limbo Integrity development signing environment, **development
- * only**, no security guarantees. Never ship it in a release anchor list.
+ * only**, no security guarantees: put it in `Trust.anchors` for a development build, never in a
+ * release.
  */
 export declare function devCa(): string;
 /**
@@ -206,42 +219,26 @@ export declare function devCa(): string;
  * validation fields it carries are not a state anything established here; verifying is
  * `AssetVerifier.verify`, which takes the asset.
  *
- * Runs on the calling thread rather than an SDK worker, unlike `embed`: a manifest store is
- * bounded by the decompression ceiling, where an asset is not.
- *
  * # Errors
  *
  * `READER_INVALID` when the bytes are not a manifest store c2pa can parse.
  */
-export declare function parse(manifest: ArrayBuffer): ManifestStore;
+export declare function parse(manifest: ArrayBuffer, asyncOpts_?: {
+  signal: AbortSignal;
+}): Promise<ManifestStore>;
 /**
  * The bytes of one resource in a detached manifest store, or nothing when it holds none under
- * `uri`.
- *
- * `uri` is the `identifier` on a resource reference the store carries, so walking the chain in
- * the parsed store is what produces it: any manifest's claim thumbnail, including a non-active
- * one, and any ingredient's. Render it with the `format` beside that identifier. A `uri` naming a
- * manifest rather than a resource answers that manifest's own JUMBF, so pass what a reference
- * states, never a bare label.
+ * `uri`: the `identifier` on a resource reference the parsed store carries. A verified
+ * credential answers the same through its own `resource`.
  *
  * # Errors
  *
  * `READER_INVALID` when the bytes are not a manifest store c2pa can parse, or the store holds
  * the resource but cannot produce it.
  */
-export declare function resource(manifest: ArrayBuffer, uri: string): ArrayBuffer | undefined;
-/**
- * Every thumbnail the store references, by the `identifier` it references them under: each
- * manifest's claim thumbnail and each ingredient's.
- *
- * One parse for the whole set, where [`resource`] pays one per call. A reference the store cannot
- * produce is left out rather than failing the set.
- *
- * # Errors
- *
- * `READER_INVALID` when the bytes are not a manifest store c2pa can parse.
- */
-export declare function thumbnails(manifest: ArrayBuffer): Map<string, ArrayBuffer>;
+export declare function resource(manifest: ArrayBuffer, uri: string, asyncOpts_?: {
+  signal: AbortSignal;
+}): Promise<ArrayBuffer | undefined>;
 /**
  * A `HashedUri` provides a reference to content available within the same
  * manifest store.
@@ -793,662 +790,202 @@ export declare const AssetType: Readonly<{
   new: (partial: Partial<AssetType> & Required<Omit<AssetType, "version">>) => AssetType;
   defaults: () => Partial<AssetType>;
 }>;
-export type SoftBinding = {
-  alg: string;
-  value: string;
+/**
+ * Whether the manifest's hard binding holds over the bytes this verify read.
+ *
+ * c2pa folds a hash mismatch into `validation_state == Invalid` with every other failure. A
+ * manifest recovered through a soft binding is validated against a transcode or a later edit,
+ * so a mismatch is the one failure it is expected to carry; naming it lets a caller tell "for
+ * other bytes" from "broken" without reading status codes.
+ */
+export declare enum HardBinding {
+  /**
+   * No data, box, BMFF or collection hash failed against these bytes.
+   */
+  Match = 0,
+  /**
+   * A hash mismatch is among the active manifest's failures: the manifest describes other
+   * bytes. Whether it is otherwise authentic is its remaining statuses.
+   */
+  Mismatch = 1
+}
+/**
+ * The re-sign chain, read from the validated stores themselves: C2PA 2.4 18.16.11 copies a
+ * `parentOf` ingredient's manifest into its successor's store, so a link here was signed by the
+ * successor. A repository's ordering is a hint; this is the evidence.
+ */
+export type Lineage = {
+  /**
+   * Active manifest labels this credential's active manifest opened as a `parentOf`
+   * ingredient, whether or not they were returned by this verify.
+   */
+  supersedes: Array<string>;
+  /**
+   * Active manifest labels of the other credentials in this result that name this one in
+   * their `supersedes`.
+   */
+  supersededBy: Array<string>;
 };
 /**
- * Generated factory for {@link SoftBinding} record objects.
+ * Generated factory for {@link Lineage} record objects.
  */
-export declare const SoftBinding: Readonly<{
-  create: (partial: Partial<SoftBinding> & Required<Omit<SoftBinding, never>>) => SoftBinding;
-  new: (partial: Partial<SoftBinding> & Required<Omit<SoftBinding, never>>) => SoftBinding;
-  defaults: () => Partial<SoftBinding>;
+export declare const Lineage: Readonly<{
+  create: (partial: Partial<Lineage> & Required<Omit<Lineage, never>>) => Lineage;
+  new: (partial: Partial<Lineage> & Required<Omit<Lineage, never>>) => Lineage;
+  defaults: () => Partial<Lineage>;
 }>;
 /**
- * The class of binding a repository derived from an uploaded asset.
- *
- * Unlike [`SoftBinding`], this carries no value: the C2PA `byContent` response does not return
- * one. The algorithm and class are still evidence because every request selects exactly one
- * advertised algorithm.
+ * Assertions in C2PA can be stored in several formats
  */
-export declare enum ContentBindingClass {
-  Fingerprint = 0,
-  Watermark = 1
+export declare enum ManifestAssertionKind {
+  Cbor = 0,
+  Json = 1,
+  Binary = 2,
+  Uri = 3
 }
 /**
- * Typealias from the type name used in the UDL file to the builtin type.  This
- * is needed because the UDL type name is used in function/method signatures.
+ * A labeled container for an Assertion value in a Manifest
  */
-export type SimilarityScore = number;
-export declare enum RecoveryDiscovery_Tags {
-  ByBinding = "ByBinding",
-  ByContent = "ByContent",
-  ByReference = "ByReference"
+export type ManifestAssertion = {
+  /**
+   * True if this assertion is attributed to the signer
+   * This maps to a created vs a gathered assertion. (defaults to false)
+   */
+  created?: boolean;
+  /**
+   * The data of the assertion as Value
+   */
+  data: JsonValue;
+  /**
+   * There can be more than one assertion for any label
+   */
+  instance?: number;
+  /**
+   * The [ManifestAssertionKind] for this assertion (as stored in c2pa content)
+   */
+  kind?: ManifestAssertionKind;
+  /**
+   * An assertion label in reverse domain format
+   */
+  label: string;
+};
+/**
+ * Generated factory for {@link ManifestAssertion} record objects.
+ */
+export declare const ManifestAssertion: Readonly<{
+  create: (partial: Partial<ManifestAssertion> & Required<Omit<ManifestAssertion, "created" | "instance" | "kind">>) => ManifestAssertion;
+  new: (partial: Partial<ManifestAssertion> & Required<Omit<ManifestAssertion, "created" | "instance" | "kind">>) => ManifestAssertion;
+  defaults: () => Partial<ManifestAssertion>;
+}>;
+/**
+ * A reference to a resource to be used in JSON serialization.
+ *
+ * The underlying data can be read as a stream via [`Reader::resource_to_stream`][crate::Reader::resource_to_stream].
+ */
+export type ResourceRef = {
+  /**
+   * The algorithm used to hash the resource (if applicable).
+   */
+  alg?: string;
+  /**
+   * More detailed data types as defined in the C2PA spec.
+   */
+  dataTypes?: Array<AssetType>;
+  /**
+   * The mime type of the referenced resource.
+   */
+  format: string;
+  /**
+   * The hash of the resource (if applicable).
+   */
+  hash?: string;
+  /**
+   * A URI that identifies the resource as referenced from the manifest.
+   *
+   * This may be a JUMBF URI, a file path, a URL or any other string.
+   * Relative JUMBF URIs will be resolved with the manifest label.
+   * Relative file paths will be resolved with the base path if provided.
+   */
+  identifier: string;
+};
+/**
+ * Generated factory for {@link ResourceRef} record objects.
+ */
+export declare const ResourceRef: Readonly<{
+  create: (partial: Partial<ResourceRef> & Required<Omit<ResourceRef, "alg" | "dataTypes" | "hash">>) => ResourceRef;
+  new: (partial: Partial<ResourceRef> & Required<Omit<ResourceRef, "alg" | "dataTypes" | "hash">>) => ResourceRef;
+  defaults: () => Partial<ResourceRef>;
+}>;
+export declare enum UriOrResource_Tags {
+  ResourceRef = "ResourceRef",
+  HashedUri = "HashedUri"
 }
-export declare const RecoveryDiscovery: Readonly<{
-  instanceOf: (obj: any) => obj is RecoveryDiscovery;
-  ByBinding: {
-    new (inner: {
-      binderIndex: number;
-      binding: SoftBinding;
-      class: ContentBindingClass;
-      repositoryScore?: SimilarityScore;
-      repository: string;
-      fetchedFrom: string;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByBinding;
-      readonly inner: Readonly<{
-        binderIndex: number;
-        binding: SoftBinding;
-        class: ContentBindingClass;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
-    };
-    "new"(inner: {
-      binderIndex: number;
-      binding: SoftBinding;
-      class: ContentBindingClass;
-      repositoryScore?: SimilarityScore;
-      repository: string;
-      fetchedFrom: string;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByBinding;
-      readonly inner: Readonly<{
-        binderIndex: number;
-        binding: SoftBinding;
-        class: ContentBindingClass;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByBinding;
-      readonly inner: Readonly<{
-        binderIndex: number;
-        binding: SoftBinding;
-        class: ContentBindingClass;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
-    };
-  };
-  ByContent: {
-    new (inner: {
-      algorithm: string;
-      class: ContentBindingClass;
-      hint?: SoftBinding;
-      repositoryScore?: SimilarityScore;
-      repository: string;
-      fetchedFrom: string;
-    }): {
+/**
+ * `UriOrResource`
+ */
+export declare const UriOrResource: Readonly<{
+  instanceOf: (obj: any) => obj is UriOrResource;
+  ResourceRef: {
+    new (v0: ResourceRef): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByContent;
-      readonly inner: Readonly<{
-        algorithm: string;
-        class: ContentBindingClass;
-        hint?: SoftBinding;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "UriOrResource";
+      readonly tag: UriOrResource_Tags.ResourceRef;
+      readonly inner: Readonly<[ResourceRef]>;
     };
-    "new"(inner: {
-      algorithm: string;
-      class: ContentBindingClass;
-      hint?: SoftBinding;
-      repositoryScore?: SimilarityScore;
-      repository: string;
-      fetchedFrom: string;
-    }): {
+    "new"(v0: ResourceRef): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByContent;
-      readonly inner: Readonly<{
-        algorithm: string;
-        class: ContentBindingClass;
-        hint?: SoftBinding;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "UriOrResource";
+      readonly tag: UriOrResource_Tags.ResourceRef;
+      readonly inner: Readonly<[ResourceRef]>;
     };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByContent;
-      readonly inner: Readonly<{
-        algorithm: string;
-        class: ContentBindingClass;
-        hint?: SoftBinding;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "UriOrResource";
+      readonly tag: UriOrResource_Tags.ResourceRef;
+      readonly inner: Readonly<[ResourceRef]>;
     };
   };
-  ByReference: {
-    new (inner: {
-      algorithm: string;
-      class: ContentBindingClass;
-      hint?: SoftBinding;
-      repositoryScore?: SimilarityScore;
-      repository: string;
-      fetchedFrom: string;
-    }): {
+  HashedUri: {
+    new (v0: HashedUri): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByReference;
-      readonly inner: Readonly<{
-        algorithm: string;
-        class: ContentBindingClass;
-        hint?: SoftBinding;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "UriOrResource";
+      readonly tag: UriOrResource_Tags.HashedUri;
+      readonly inner: Readonly<[HashedUri]>;
     };
-    "new"(inner: {
-      algorithm: string;
-      class: ContentBindingClass;
-      hint?: SoftBinding;
-      repositoryScore?: SimilarityScore;
-      repository: string;
-      fetchedFrom: string;
-    }): {
+    "new"(v0: HashedUri): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByReference;
-      readonly inner: Readonly<{
-        algorithm: string;
-        class: ContentBindingClass;
-        hint?: SoftBinding;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "UriOrResource";
+      readonly tag: UriOrResource_Tags.HashedUri;
+      readonly inner: Readonly<[HashedUri]>;
     };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryDiscovery";
-      readonly tag: RecoveryDiscovery_Tags.ByReference;
-      readonly inner: Readonly<{
-        algorithm: string;
-        class: ContentBindingClass;
-        hint?: SoftBinding;
-        repositoryScore?: SimilarityScore;
-        repository: string;
-        fetchedFrom: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "UriOrResource";
+      readonly tag: UriOrResource_Tags.HashedUri;
+      readonly inner: Readonly<[HashedUri]>;
     };
   };
 }>;
-export type RecoveryDiscovery = InstanceType<typeof RecoveryDiscovery['ByBinding' | 'ByContent' | 'ByReference']>;
-export declare enum FingerprintCheck_Tags {
-  NotNeeded = "NotNeeded",
-  NothingToCompare = "NothingToCompare",
-  Unsupported = "Unsupported",
-  Indeterminate = "Indeterminate",
-  Compared = "Compared"
-}
 /**
- * Whether the asset's own fingerprint backs up a manifest that a watermark led to.
- *
- * C2PA 2.4 1.2.2.3: a watermark can be lifted from one asset onto another, so a mark alone does
- * not establish that the manifest it resolves to describes THIS asset. The mitigation the spec
- * gives is to compare a fingerprint computed from the asset against the one the recovered
- * manifest records, and `watermark-and-fingerprint` ends on exactly that comparison.
- *
- * Reported rather than enforced: a transcode legitimately shifts a fingerprint, so where the line
- * falls is the relying party's policy, not this SDK's. What the SDK owes them is the measurement.
- */
-export declare const FingerprintCheck: Readonly<{
-  instanceOf: (obj: any) => obj is FingerprintCheck;
-  NotNeeded: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NotNeeded;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NotNeeded;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NotNeeded;
-    };
-  };
-  NothingToCompare: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NothingToCompare;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NothingToCompare;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NothingToCompare;
-    };
-  };
-  Unsupported: {
-    new (inner: {
-      algorithm: string;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Unsupported;
-      readonly inner: Readonly<{
-        algorithm: string;
-      }>;
-    };
-    "new"(inner: {
-      algorithm: string;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Unsupported;
-      readonly inner: Readonly<{
-        algorithm: string;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Unsupported;
-      readonly inner: Readonly<{
-        algorithm: string;
-      }>;
-    };
-  };
-  Indeterminate: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Indeterminate;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Indeterminate;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Indeterminate;
-    };
-  };
-  Compared: {
-    new (inner: {
-      score: SimilarityScore;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Compared;
-      readonly inner: Readonly<{
-        score: SimilarityScore;
-      }>;
-    };
-    "new"(inner: {
-      score: SimilarityScore;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Compared;
-      readonly inner: Readonly<{
-        score: SimilarityScore;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Compared;
-      readonly inner: Readonly<{
-        score: SimilarityScore;
-      }>;
-    };
-  };
-}>;
-/**
- * Whether the asset's own fingerprint backs up a manifest that a watermark led to.
- *
- * C2PA 2.4 1.2.2.3: a watermark can be lifted from one asset onto another, so a mark alone does
- * not establish that the manifest it resolves to describes THIS asset. The mitigation the spec
- * gives is to compare a fingerprint computed from the asset against the one the recovered
- * manifest records, and `watermark-and-fingerprint` ends on exactly that comparison.
- *
- * Reported rather than enforced: a transcode legitimately shifts a fingerprint, so where the line
- * falls is the relying party's policy, not this SDK's. What the SDK owes them is the measurement.
- */
-export type FingerprintCheck = InstanceType<typeof FingerprintCheck['NotNeeded' | 'NothingToCompare' | 'Unsupported' | 'Indeterminate' | 'Compared']>;
-export declare enum CredentialOrigin_Tags {
-  Embedded = "Embedded",
-  Recovered = "Recovered"
-}
-/**
- * FFI projection of the domain origin. The soft-binding DTO remains public and wire-shaped,
- * while the domain value keeps its constructor invariant private.
- */
-export declare const CredentialOrigin: Readonly<{
-  instanceOf: (obj: any) => obj is CredentialOrigin;
-  Embedded: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Embedded;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Embedded;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Embedded;
-    };
-  };
-  Recovered: {
-    new (inner: {
-      discoveries: Array<RecoveryDiscovery>;
-      fingerprintCheck: FingerprintCheck;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Recovered;
-      readonly inner: Readonly<{
-        discoveries: Array<RecoveryDiscovery>;
-        fingerprintCheck: FingerprintCheck;
-      }>;
-    };
-    "new"(inner: {
-      discoveries: Array<RecoveryDiscovery>;
-      fingerprintCheck: FingerprintCheck;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Recovered;
-      readonly inner: Readonly<{
-        discoveries: Array<RecoveryDiscovery>;
-        fingerprintCheck: FingerprintCheck;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Recovered;
-      readonly inner: Readonly<{
-        discoveries: Array<RecoveryDiscovery>;
-        fingerprintCheck: FingerprintCheck;
-      }>;
-    };
-  };
-}>;
-/**
- * FFI projection of the domain origin. The soft-binding DTO remains public and wire-shaped,
- * while the domain value keeps its constructor invariant private.
- */
-export type CredentialOrigin = InstanceType<typeof CredentialOrigin['Embedded' | 'Recovered']>;
-/**
- * Assertions in C2PA can be stored in several formats
- */
-export declare enum ManifestAssertionKind {
-  Cbor = 0,
-  Json = 1,
-  Binary = 2,
-  Uri = 3
-}
-/**
- * A labeled container for an Assertion value in a Manifest
- */
-export type ManifestAssertion = {
-  /**
-   * True if this assertion is attributed to the signer
-   * This maps to a created vs a gathered assertion. (defaults to false)
-   */
-  created?: boolean;
-  /**
-   * The data of the assertion as Value
-   */
-  data: JsonValue;
-  /**
-   * There can be more than one assertion for any label
-   */
-  instance?: number;
-  /**
-   * The [ManifestAssertionKind] for this assertion (as stored in c2pa content)
-   */
-  kind?: ManifestAssertionKind;
-  /**
-   * An assertion label in reverse domain format
-   */
-  label: string;
-};
-/**
- * Generated factory for {@link ManifestAssertion} record objects.
- */
-export declare const ManifestAssertion: Readonly<{
-  create: (partial: Partial<ManifestAssertion> & Required<Omit<ManifestAssertion, "created" | "instance" | "kind">>) => ManifestAssertion;
-  new: (partial: Partial<ManifestAssertion> & Required<Omit<ManifestAssertion, "created" | "instance" | "kind">>) => ManifestAssertion;
-  defaults: () => Partial<ManifestAssertion>;
-}>;
-/**
- * A reference to a resource to be used in JSON serialization.
- *
- * The underlying data can be read as a stream via [`Reader::resource_to_stream`][crate::Reader::resource_to_stream].
- */
-export type ResourceRef = {
-  /**
-   * The algorithm used to hash the resource (if applicable).
-   */
-  alg?: string;
-  /**
-   * More detailed data types as defined in the C2PA spec.
-   */
-  dataTypes?: Array<AssetType>;
-  /**
-   * The mime type of the referenced resource.
-   */
-  format: string;
-  /**
-   * The hash of the resource (if applicable).
-   */
-  hash?: string;
-  /**
-   * A URI that identifies the resource as referenced from the manifest.
-   *
-   * This may be a JUMBF URI, a file path, a URL or any other string.
-   * Relative JUMBF URIs will be resolved with the manifest label.
-   * Relative file paths will be resolved with the base path if provided.
-   */
-  identifier: string;
-};
-/**
- * Generated factory for {@link ResourceRef} record objects.
- */
-export declare const ResourceRef: Readonly<{
-  create: (partial: Partial<ResourceRef> & Required<Omit<ResourceRef, "alg" | "dataTypes" | "hash">>) => ResourceRef;
-  new: (partial: Partial<ResourceRef> & Required<Omit<ResourceRef, "alg" | "dataTypes" | "hash">>) => ResourceRef;
-  defaults: () => Partial<ResourceRef>;
-}>;
-export declare enum UriOrResource_Tags {
-  ResourceRef = "ResourceRef",
-  HashedUri = "HashedUri"
-}
-/**
- * `UriOrResource`
- */
-export declare const UriOrResource: Readonly<{
-  instanceOf: (obj: any) => obj is UriOrResource;
-  ResourceRef: {
-    new (v0: ResourceRef): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "UriOrResource";
-      readonly tag: UriOrResource_Tags.ResourceRef;
-      readonly inner: Readonly<[ResourceRef]>;
-    };
-    "new"(v0: ResourceRef): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "UriOrResource";
-      readonly tag: UriOrResource_Tags.ResourceRef;
-      readonly inner: Readonly<[ResourceRef]>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "UriOrResource";
-      readonly tag: UriOrResource_Tags.ResourceRef;
-      readonly inner: Readonly<[ResourceRef]>;
-    };
-  };
-  HashedUri: {
-    new (v0: HashedUri): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "UriOrResource";
-      readonly tag: UriOrResource_Tags.HashedUri;
-      readonly inner: Readonly<[HashedUri]>;
-    };
-    "new"(v0: HashedUri): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "UriOrResource";
-      readonly tag: UriOrResource_Tags.HashedUri;
-      readonly inner: Readonly<[HashedUri]>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "UriOrResource";
-      readonly tag: UriOrResource_Tags.HashedUri;
-      readonly inner: Readonly<[HashedUri]>;
-    };
-  };
-}>;
-/**
- * `UriOrResource`
+ * `UriOrResource`
  */
 export type UriOrResource = InstanceType<typeof UriOrResource['ResourceRef' | 'HashedUri']>;
 /**
@@ -1842,322 +1379,1028 @@ export type Manifest = {
   vendor?: string;
 };
 /**
- * Generated factory for {@link Manifest} record objects.
+ * Generated factory for {@link Manifest} record objects.
+ */
+export declare const Manifest: Readonly<{
+  create: (partial: Partial<Manifest> & Required<Omit<Manifest, "claimGenerator" | "claimGeneratorInfo" | "claimVersion" | "credentials" | "format" | "label" | "metadata" | "redactions" | "signatureInfo" | "thumbnail" | "title" | "vendor">>) => Manifest;
+  new: (partial: Partial<Manifest> & Required<Omit<Manifest, "claimGenerator" | "claimGeneratorInfo" | "claimVersion" | "credentials" | "format" | "label" | "metadata" | "redactions" | "signatureInfo" | "thumbnail" | "title" | "vendor">>) => Manifest;
+  defaults: () => Partial<Manifest>;
+}>;
+/**
+ * Represents the levels of assurance a manifest store achieves when evaluated against the C2PA
+ * specifications structural, cryptographic, and trust requirements.
+ *
+ * See [Validation states - C2PA Technical Specification](https://spec.c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_validation_states).
+ */
+export declare enum ValidationState {
+  /**
+   * The manifest store fails to meet ValidationState::WellFormed requirements, meaning it cannot
+   * even be parsed or its basic structure is non-compliant.
+   *
+   * This case may also occur if validation is disabled in the SDK.
+   */
+  Invalid = 0,
+  /**
+   * The manifest store is well-formed and the cryptographic integrity checks succeed.
+   *
+   * See [Valid Manifest - C2PA Technical Specification](https://spec.c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_valid_manifest).
+   */
+  Valid = 1,
+  /**
+   * The manifest store is valid and signed by a certificate that chains up to a trusted root or known
+   * authority in the trust list.
+   *
+   * See [Trusted Manifest - C2PA Technical Specification](https://spec.c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_trusted_manifest).
+   */
+  Trusted = 2
+}
+/**
+ * Use a Reader to read and validate a manifest store.
+ */
+export type ManifestStore = {
+  /**
+   * A label for the active (most recent) manifest in the store
+   */
+  activeManifest?: string;
+  /**
+   * A HashMap of Manifests
+   */
+  manifests: Map<string, Manifest>;
+  /**
+   * ValidationStatus generated when loading the ManifestStore from an asset
+   */
+  validationResults?: ValidationResults;
+  /**
+   * The validation state of the manifest store
+   */
+  validationState?: ValidationState;
+  /**
+   * ValidationStatus generated when loading the ManifestStore from an asset
+   */
+  validationStatus?: Array<ValidationStatus>;
+};
+/**
+ * Generated factory for {@link ManifestStore} record objects.
+ */
+export declare const ManifestStore: Readonly<{
+  create: (partial: Partial<ManifestStore> & Required<Omit<ManifestStore, "activeManifest" | "validationResults" | "validationState" | "validationStatus">>) => ManifestStore;
+  new: (partial: Partial<ManifestStore> & Required<Omit<ManifestStore, "activeManifest" | "validationResults" | "validationState" | "validationStatus">>) => ManifestStore;
+  defaults: () => Partial<ManifestStore>;
+}>;
+/**
+ * The value a content query was hinted with, under its own algorithm.
+ */
+export type Hint = {
+  alg: string;
+  value: ArrayBuffer;
+};
+/**
+ * Generated factory for {@link Hint} record objects.
+ */
+export declare const Hint: Readonly<{
+  create: (partial: Partial<Hint> & Required<Omit<Hint, never>>) => Hint;
+  new: (partial: Partial<Hint> & Required<Omit<Hint, never>>) => Hint;
+  defaults: () => Partial<Hint>;
+}>;
+export declare enum DiscoveryVia_Tags {
+  ByBinding = "ByBinding",
+  ByContent = "ByContent",
+  ByReference = "ByReference"
+}
+/**
+ * The Soft Binding Resolution API route a discovery came through.
+ */
+export declare const DiscoveryVia: Readonly<{
+  instanceOf: (obj: any) => obj is DiscoveryVia;
+  ByBinding: {
+    new (inner: {
+      value: ArrayBuffer;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByBinding;
+      readonly inner: Readonly<{
+        value: ArrayBuffer;
+      }>;
+    };
+    "new"(inner: {
+      value: ArrayBuffer;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByBinding;
+      readonly inner: Readonly<{
+        value: ArrayBuffer;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByBinding;
+      readonly inner: Readonly<{
+        value: ArrayBuffer;
+      }>;
+    };
+  };
+  ByContent: {
+    new (inner: {
+      hint?: Hint;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByContent;
+      readonly inner: Readonly<{
+        hint?: Hint;
+      }>;
+    };
+    "new"(inner: {
+      hint?: Hint;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByContent;
+      readonly inner: Readonly<{
+        hint?: Hint;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByContent;
+      readonly inner: Readonly<{
+        hint?: Hint;
+      }>;
+    };
+  };
+  ByReference: {
+    new (inner: {
+      hint?: Hint;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByReference;
+      readonly inner: Readonly<{
+        hint?: Hint;
+      }>;
+    };
+    "new"(inner: {
+      hint?: Hint;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByReference;
+      readonly inner: Readonly<{
+        hint?: Hint;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByReference;
+      readonly inner: Readonly<{
+        hint?: Hint;
+      }>;
+    };
+  };
+}>;
+/**
+ * The Soft Binding Resolution API route a discovery came through.
  */
-export declare const Manifest: Readonly<{
-  create: (partial: Partial<Manifest> & Required<Omit<Manifest, "claimGenerator" | "claimGeneratorInfo" | "claimVersion" | "credentials" | "format" | "label" | "metadata" | "redactions" | "signatureInfo" | "thumbnail" | "title" | "vendor">>) => Manifest;
-  new: (partial: Partial<Manifest> & Required<Omit<Manifest, "claimGenerator" | "claimGeneratorInfo" | "claimVersion" | "credentials" | "format" | "label" | "metadata" | "redactions" | "signatureInfo" | "thumbnail" | "title" | "vendor">>) => Manifest;
-  defaults: () => Partial<Manifest>;
-}>;
+export type DiscoveryVia = InstanceType<typeof DiscoveryVia['ByBinding' | 'ByContent' | 'ByReference']>;
 /**
- * Represents the levels of assurance a manifest store achieves when evaluated against the C2PA
- * specifications structural, cryptographic, and trust requirements.
- *
- * See [Validation states - C2PA Technical Specification](https://spec.c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_validation_states).
+ * The C2PA list's `type` of a soft binding algorithm.
  */
-export declare enum ValidationState {
-  /**
-   * The manifest store fails to meet ValidationState::WellFormed requirements, meaning it cannot
-   * even be parsed or its basic structure is non-compliant.
-   *
-   * This case may also occur if validation is disabled in the SDK.
-   */
-  Invalid = 0,
-  /**
-   * The manifest store is well-formed and the cryptographic integrity checks succeed.
-   *
-   * See [Valid Manifest - C2PA Technical Specification](https://spec.c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_valid_manifest).
-   */
-  Valid = 1,
-  /**
-   * The manifest store is valid and signed by a certificate that chains up to a trusted root or known
-   * authority in the trust list.
-   *
-   * See [Trusted Manifest - C2PA Technical Specification](https://spec.c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_trusted_manifest).
-   */
-  Trusted = 2
+export declare enum SoftBindingType {
+  Fingerprint = 0,
+  Watermark = 1
 }
 /**
- * Use a Reader to read and validate a manifest store.
+ * Typealias from the type name used in the UDL file to the builtin type.  This
+ * is needed because the UDL type name is used in function/method signatures.
  */
-export type ManifestStore = {
-  /**
-   * A label for the active (most recent) manifest in the store
-   */
-  activeManifest?: string;
-  /**
-   * A HashMap of Manifests
-   */
-  manifests: Map<string, Manifest>;
-  /**
-   * ValidationStatus generated when loading the ManifestStore from an asset
-   */
-  validationResults?: ValidationResults;
-  /**
-   * The validation state of the manifest store
-   */
-  validationState?: ValidationState;
+export type SimilarityScore = number;
+/**
+ * One query that located a recovered credential: how it was asked, under which algorithm, and
+ * where the manifest came from.
+ */
+export type Discovery = {
+  via: DiscoveryVia;
+  alg: string;
+  type: SoftBindingType;
   /**
-   * ValidationStatus generated when loading the ManifestStore from an asset
+   * The repository's `similarityScore`, 0-100.
    */
-  validationStatus?: Array<ValidationStatus>;
+  score?: SimilarityScore;
+  repository: string;
+  endpoint?: string;
 };
 /**
- * Generated factory for {@link ManifestStore} record objects.
+ * Generated factory for {@link Discovery} record objects.
  */
-export declare const ManifestStore: Readonly<{
-  create: (partial: Partial<ManifestStore> & Required<Omit<ManifestStore, "activeManifest" | "validationResults" | "validationState" | "validationStatus">>) => ManifestStore;
-  new: (partial: Partial<ManifestStore> & Required<Omit<ManifestStore, "activeManifest" | "validationResults" | "validationState" | "validationStatus">>) => ManifestStore;
-  defaults: () => Partial<ManifestStore>;
+export declare const Discovery: Readonly<{
+  create: (partial: Partial<Discovery> & Required<Omit<Discovery, "endpoint" | "score">>) => Discovery;
+  new: (partial: Partial<Discovery> & Required<Omit<Discovery, "endpoint" | "score">>) => Discovery;
+  defaults: () => Partial<Discovery>;
+}>;
+export declare enum FingerprintCheck_Tags {
+  NotNeeded = "NotNeeded",
+  Missing = "Missing",
+  Unsupported = "Unsupported",
+  Indeterminate = "Indeterminate",
+  Compared = "Compared"
+}
+/**
+ * Whether the asset's own fingerprint backs up a manifest that a watermark led to.
+ *
+ * C2PA 2.4 1.2.2.3: a watermark can be lifted from one asset onto another, so a mark alone does
+ * not establish that the manifest it resolves to describes THIS asset. The mitigation the spec
+ * gives is to compare a fingerprint computed from the asset against the one the recovered
+ * manifest records, and `watermark-and-fingerprint` ends on exactly that comparison.
+ *
+ * Reported rather than enforced: a transcode legitimately shifts a fingerprint, so where the line
+ * falls is the relying party's policy, not this SDK's. What the SDK owes them is the measurement.
+ */
+export declare const FingerprintCheck: Readonly<{
+  instanceOf: (obj: any) => obj is FingerprintCheck;
+  NotNeeded: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.NotNeeded;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.NotNeeded;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.NotNeeded;
+    };
+  };
+  Missing: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Missing;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Missing;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Missing;
+    };
+  };
+  Unsupported: {
+    new (inner: {
+      alg: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Unsupported;
+      readonly inner: Readonly<{
+        alg: string;
+      }>;
+    };
+    "new"(inner: {
+      alg: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Unsupported;
+      readonly inner: Readonly<{
+        alg: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Unsupported;
+      readonly inner: Readonly<{
+        alg: string;
+      }>;
+    };
+  };
+  Indeterminate: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Indeterminate;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Indeterminate;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Indeterminate;
+    };
+  };
+  Compared: {
+    new (inner: {
+      score: SimilarityScore;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Compared;
+      readonly inner: Readonly<{
+        score: SimilarityScore;
+      }>;
+    };
+    "new"(inner: {
+      score: SimilarityScore;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Compared;
+      readonly inner: Readonly<{
+        score: SimilarityScore;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Compared;
+      readonly inner: Readonly<{
+        score: SimilarityScore;
+      }>;
+    };
+  };
 }>;
 /**
- * Whether the manifest's hard binding holds over the bytes this verify read.
+ * Whether the asset's own fingerprint backs up a manifest that a watermark led to.
  *
- * c2pa folds a hash mismatch into `validation_state == Invalid` with every other failure. A
- * manifest recovered through a soft binding is validated against a transcode or a later edit,
- * so a mismatch is the one failure it is expected to carry; naming it lets a caller tell "for
- * other bytes" from "broken" without reading status codes.
+ * C2PA 2.4 1.2.2.3: a watermark can be lifted from one asset onto another, so a mark alone does
+ * not establish that the manifest it resolves to describes THIS asset. The mitigation the spec
+ * gives is to compare a fingerprint computed from the asset against the one the recovered
+ * manifest records, and `watermark-and-fingerprint` ends on exactly that comparison.
+ *
+ * Reported rather than enforced: a transcode legitimately shifts a fingerprint, so where the line
+ * falls is the relying party's policy, not this SDK's. What the SDK owes them is the measurement.
  */
-export declare enum HardBinding {
-  /**
-   * No data, box, BMFF or collection hash failed against these bytes.
-   */
-  Match = 0,
-  /**
-   * A hash mismatch is among the active manifest's failures: the manifest describes other
-   * bytes. Whether it is otherwise authentic is its remaining statuses.
-   */
-  Mismatch = 1
+export type FingerprintCheck = InstanceType<typeof FingerprintCheck['NotNeeded' | 'Missing' | 'Unsupported' | 'Indeterminate' | 'Compared']>;
+export declare enum CredentialOrigin_Tags {
+  Embedded = "Embedded",
+  Recovered = "Recovered"
 }
 /**
- * The re-sign chain, read from the validated stores themselves: C2PA 2.4 18.16.11 copies a
- * `parentOf` ingredient's manifest into its successor's store, so a link here was signed by the
- * successor. A repository's ordering is a hint; this is the evidence.
+ * Where a credential came from: embedded in the asset, or recovered from a repository.
  */
-export type Lineage = {
-  /**
-   * Active manifest labels this credential's active manifest opened as a `parentOf`
-   * ingredient, whether or not they were returned by this verify.
-   */
-  supersedes: Array<string>;
-  /**
-   * Active manifest labels of the other credentials in this result that name this one in
-   * their `supersedes`.
-   */
-  supersededBy: Array<string>;
-};
+export declare const CredentialOrigin: Readonly<{
+  instanceOf: (obj: any) => obj is CredentialOrigin;
+  Embedded: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
+      readonly tag: CredentialOrigin_Tags.Embedded;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
+      readonly tag: CredentialOrigin_Tags.Embedded;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
+      readonly tag: CredentialOrigin_Tags.Embedded;
+    };
+  };
+  Recovered: {
+    new (inner: {
+      discoveries: Array<Discovery>;
+      fingerprintCheck: FingerprintCheck;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
+      readonly tag: CredentialOrigin_Tags.Recovered;
+      readonly inner: Readonly<{
+        discoveries: Array<Discovery>;
+        fingerprintCheck: FingerprintCheck;
+      }>;
+    };
+    "new"(inner: {
+      discoveries: Array<Discovery>;
+      fingerprintCheck: FingerprintCheck;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
+      readonly tag: CredentialOrigin_Tags.Recovered;
+      readonly inner: Readonly<{
+        discoveries: Array<Discovery>;
+        fingerprintCheck: FingerprintCheck;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
+      readonly tag: CredentialOrigin_Tags.Recovered;
+      readonly inner: Readonly<{
+        discoveries: Array<Discovery>;
+        fingerprintCheck: FingerprintCheck;
+      }>;
+    };
+  };
+}>;
 /**
- * Generated factory for {@link Lineage} record objects.
+ * Where a credential came from: embedded in the asset, or recovered from a repository.
  */
-export declare const Lineage: Readonly<{
-  create: (partial: Partial<Lineage> & Required<Omit<Lineage, never>>) => Lineage;
-  new: (partial: Partial<Lineage> & Required<Omit<Lineage, never>>) => Lineage;
-  defaults: () => Partial<Lineage>;
-}>;
+export type CredentialOrigin = InstanceType<typeof CredentialOrigin['Embedded' | 'Recovered']>;
 /**
- * One `verify` result: the c2pa manifest store, where it came from, and whether its hard
- * binding holds over the bytes read. The recovered origin carries the same `SoftBinding` record
- * `Binder.derive` returns, so a derived binding and a recovering one are one type.
+ * A canonical gRPC/Connect status code: the coarse, closed failure class.
  */
-export type Credential = {
-  /**
-   * The bytes behind every thumbnail the manifests reference, by that reference's
-   * `identifier`: each manifest's claim thumbnail and each ingredient's. The manifests state
-   * identifiers and no images, so this is what a chain draws from.
-   */
-  thumbnails: Map<string, ArrayBuffer>;
-  /**
-   * Where this credential came from. See [`asset::CredentialOrigin`].
-   */
-  origin: CredentialOrigin;
+export declare enum Code {
+  Canceled = 0,
+  Unknown = 1,
+  InvalidArgument = 2,
+  DeadlineExceeded = 3,
+  NotFound = 4,
+  AlreadyExists = 5,
+  PermissionDenied = 6,
+  ResourceExhausted = 7,
+  FailedPrecondition = 8,
+  Aborted = 9,
+  OutOfRange = 10,
+  Unimplemented = 11,
+  Internal = 12,
+  Unavailable = 13,
+  DataLoss = 14,
+  Unauthenticated = 15
+}
+/**
+ * One `google.rpc.BadRequest.FieldViolation`: a request field that failed a constraint.
+ */
+export type FieldViolation = {
   /**
-   * The c2pa manifest store: its manifests by label, the active one, and the
-   * validation state and results.
+   * The offending field: rooted at the call's argument when an SDK refuses it
+   * (`options.soft_bindings[1].alg`), at the request when a service does
+   * (`provenance.actions[0].label`).
    */
-  manifest: ManifestStore;
+  field: string;
   /**
-   * Whether the manifest's hard binding holds over the bytes this verify read.
+   * Human-readable explanation of the violation.
    */
-  hardBinding: HardBinding;
+  description: string;
   /**
-   * Where this credential sits among the others returned. See [`asset::Lineage`].
+   * The rule that failed, such as `string.min_len` or `alg.unlisted`: the stable branch key.
    */
-  lineage: Lineage;
+  reason: string;
 };
 /**
- * Generated factory for {@link Credential} record objects.
+ * Generated factory for {@link FieldViolation} record objects.
  */
-export declare const Credential: Readonly<{
-  create: (partial: Partial<Credential> & Required<Omit<Credential, never>>) => Credential;
-  new: (partial: Partial<Credential> & Required<Omit<Credential, never>>) => Credential;
-  defaults: () => Partial<Credential>;
+export declare const FieldViolation: Readonly<{
+  create: (partial: Partial<FieldViolation> & Required<Omit<FieldViolation, never>>) => FieldViolation;
+  new: (partial: Partial<FieldViolation> & Required<Omit<FieldViolation, never>>) => FieldViolation;
+  defaults: () => Partial<FieldViolation>;
 }>;
-/**
- * Whether the configured recovery sequence ran to a conclusive answer.
- */
-export declare enum RecoveryStatus {
-  NotRequested = 0,
-  NotFound = 1,
-  Recovered = 2,
-  /**
-   * No credential was recovered and at least one required attempt failed or was skipped.
-   */
-  Incomplete = 3
-}
-export declare enum RecoveryIssue_Tags {
-  BinderFailed = "BinderFailed",
-  AlgorithmDeprecated = "AlgorithmDeprecated",
-  BindingUndeclared = "BindingUndeclared",
-  BindingQueryFailed = "BindingQueryFailed",
-  QueryRefused = "QueryRefused",
-  ContentFormUnsupported = "ContentFormUnsupported",
-  ContentQueryFailed = "ContentQueryFailed",
-  CapabilitiesUnavailable = "CapabilitiesUnavailable",
-  ContentTooLarge = "ContentTooLarge",
-  CandidateFetchFailed = "CandidateFetchFailed",
-  CandidateInvalid = "CandidateInvalid",
-  EndpointRefused = "EndpointRefused",
-  ResourceLimitReached = "ResourceLimitReached"
+export declare enum SdkError_Tags {
+  Reason = "Reason",
+  Invalid = "Invalid",
+  Status = "Status"
 }
 /**
- * Why repository recovery did not complete cleanly, or why one candidate was omitted while another
- * succeeded. Kept as data so a partial recovery never loses the rest of the lookup outcome, and
- * each kind carries exactly what it is about.
+ * The error every SDK call throws: a decoded `google.rpc.Status`, discriminated
+ * as a semantic reason, a request validation, or a bare status. `code` and `message`
+ * are common to every variant.
  */
-export declare const RecoveryIssue: Readonly<{
-  instanceOf: (obj: any) => obj is RecoveryIssue;
-  BinderFailed: {
+export declare const SdkError: Readonly<{
+  instanceOf: (obj: any) => obj is SdkError;
+  Reason: {
     new (inner: {
-      binderIndex: number;
+      code: Code;
+      message: string;
+      reason: string;
+      domain: string;
+      metadata: Map<string, string>;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Reason;
+      readonly inner: Readonly<{
+        code: Code;
+        message: string;
+        reason: string;
+        domain: string;
+        metadata: Map<string, string>;
+      }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
+    };
+    "new"(inner: {
+      code: Code;
+      message: string;
+      reason: string;
+      domain: string;
+      metadata: Map<string, string>;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Reason;
+      readonly inner: Readonly<{
+        code: Code;
+        message: string;
+        reason: string;
+        domain: string;
+        metadata: Map<string, string>;
+      }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Reason;
+      readonly inner: Readonly<{
+        code: Code;
+        message: string;
+        reason: string;
+        domain: string;
+        metadata: Map<string, string>;
+      }>;
+      name: string;
       message: string;
-    }): {
+      stack?: string;
+      cause?: unknown;
+    };
+    hasInner(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BinderFailed;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Reason;
       readonly inner: Readonly<{
-        binderIndex: number;
+        code: Code;
         message: string;
+        reason: string;
+        domain: string;
+        metadata: Map<string, string>;
       }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
     };
-    "new"(inner: {
-      binderIndex: number;
+    getInner(obj: {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Reason;
+      readonly inner: Readonly<{
+        code: Code;
+        message: string;
+        reason: string;
+        domain: string;
+        metadata: Map<string, string>;
+      }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
+    }): Readonly<{
+      code: Code;
+      message: string;
+      reason: string;
+      domain: string;
+      metadata: Map<string, string>;
+    }>;
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
+  };
+  Invalid: {
+    new (inner: {
+      code: Code;
       message: string;
+      fieldViolations: Array<FieldViolation>;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BinderFailed;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Invalid;
       readonly inner: Readonly<{
-        binderIndex: number;
+        code: Code;
         message: string;
+        fieldViolations: Array<FieldViolation>;
       }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
     };
-    instanceOf(obj: any): obj is {
+    "new"(inner: {
+      code: Code;
+      message: string;
+      fieldViolations: Array<FieldViolation>;
+    }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BinderFailed;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Invalid;
       readonly inner: Readonly<{
-        binderIndex: number;
+        code: Code;
         message: string;
+        fieldViolations: Array<FieldViolation>;
       }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
     };
-  };
-  AlgorithmDeprecated: {
-    new (inner: {
-      algorithm: string;
-    }): {
+    instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.AlgorithmDeprecated;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Invalid;
       readonly inner: Readonly<{
-        algorithm: string;
+        code: Code;
+        message: string;
+        fieldViolations: Array<FieldViolation>;
       }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
     };
-    "new"(inner: {
-      algorithm: string;
-    }): {
+    hasInner(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.AlgorithmDeprecated;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Invalid;
       readonly inner: Readonly<{
-        algorithm: string;
+        code: Code;
+        message: string;
+        fieldViolations: Array<FieldViolation>;
       }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
     };
-    instanceOf(obj: any): obj is {
+    getInner(obj: {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.AlgorithmDeprecated;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Invalid;
       readonly inner: Readonly<{
-        algorithm: string;
+        code: Code;
+        message: string;
+        fieldViolations: Array<FieldViolation>;
       }>;
-    };
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
+    }): Readonly<{
+      code: Code;
+      message: string;
+      fieldViolations: Array<FieldViolation>;
+    }>;
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
   };
-  BindingUndeclared: {
+  Status: {
     new (inner: {
-      binderIndex: number;
-      algorithm: string;
+      code: Code;
+      message: string;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingUndeclared;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Status;
       readonly inner: Readonly<{
-        binderIndex: number;
-        algorithm: string;
+        code: Code;
+        message: string;
       }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
     };
     "new"(inner: {
-      binderIndex: number;
-      algorithm: string;
+      code: Code;
+      message: string;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingUndeclared;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Status;
       readonly inner: Readonly<{
-        binderIndex: number;
-        algorithm: string;
+        code: Code;
+        message: string;
       }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
     };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingUndeclared;
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Status;
+      readonly inner: Readonly<{
+        code: Code;
+        message: string;
+      }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
+    };
+    hasInner(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Status;
       readonly inner: Readonly<{
-        binderIndex: number;
-        algorithm: string;
+        code: Code;
+        message: string;
       }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
     };
+    getInner(obj: {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "SdkError";
+      readonly tag: SdkError_Tags.Status;
+      readonly inner: Readonly<{
+        code: Code;
+        message: string;
+      }>;
+      name: string;
+      message: string;
+      stack?: string;
+      cause?: unknown;
+    }): Readonly<{
+      code: Code;
+      message: string;
+    }>;
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
   };
-  BindingQueryFailed: {
+}>;
+/**
+ * The error every SDK call throws: a decoded `google.rpc.Status`, discriminated
+ * as a semantic reason, a request validation, or a bare status. `code` and `message`
+ * are common to every variant.
+ */
+export type SdkError = InstanceType<typeof SdkError['Reason' | 'Invalid' | 'Status']>;
+/**
+ * One `verify` result: the c2pa manifest store, where it came from, and whether its hard
+ * binding holds over the bytes read. A handle: it keeps the store, so a thumbnail is read from it
+ * with `resource` and never travels with the report.
+ */
+export interface CredentialLike {
+  /**
+   * Whether the manifest's hard binding holds over the bytes this verify read.
+   */
+  hardBinding(): HardBinding;
+  /**
+   * Where this credential sits among the others returned.
+   */
+  lineage(): Lineage;
+  /**
+   * The c2pa manifest store: its manifests by label, the active one, and the validation state
+   * and results.
+   */
+  manifest(): ManifestStore;
+  /**
+   * Where this credential came from.
+   */
+  origin(): CredentialOrigin;
+  /**
+   * The bytes of one resource the store holds, or nothing: a thumbnail is read with the
+   * `identifier` of the resource reference in `manifest`, and rendered with the `format` beside
+   * it. A `uri` naming a manifest rather than a resource answers that manifest's own JUMBF, so
+   * pass what a reference states, never a bare label.
+   *
+   * # Errors
+   *
+   * `READER_INVALID` when the store holds the resource but cannot produce it.
+   */
+  resource(uri: string, asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<ArrayBuffer | undefined>;
+}
+/**
+ * @deprecated Use `CredentialLike` instead.
+ */
+export type CredentialInterface = CredentialLike;
+/**
+ * One `verify` result: the c2pa manifest store, where it came from, and whether its hard
+ * binding holds over the bytes read. A handle: it keeps the store, so a thumbnail is read from it
+ * with `resource` and never travels with the report.
+ */
+export declare class Credential extends UniffiAbstractObject implements CredentialLike {
+  readonly [uniffiTypeNameSymbol] = "Credential";
+  readonly [destructorGuardSymbol]: UniffiGcObject;
+  readonly [pointerLiteralSymbol]: UniffiHandle;
+  private constructor();
+  /**
+   * Whether the manifest's hard binding holds over the bytes this verify read.
+   */
+  hardBinding(): HardBinding;
+  /**
+   * Where this credential sits among the others returned.
+   */
+  lineage(): Lineage;
+  /**
+   * The c2pa manifest store: its manifests by label, the active one, and the validation state
+   * and results.
+   */
+  manifest(): ManifestStore;
+  /**
+   * Where this credential came from.
+   */
+  origin(): CredentialOrigin;
+  /**
+   * The bytes of one resource the store holds, or nothing: a thumbnail is read with the
+   * `identifier` of the resource reference in `manifest`, and rendered with the `format` beside
+   * it. A `uri` naming a manifest rather than a resource answers that manifest's own JUMBF, so
+   * pass what a reference states, never a bare label.
+   *
+   * # Errors
+   *
+   * `READER_INVALID` when the store holds the resource but cannot produce it.
+   */
+  resource(uri: string, asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<ArrayBuffer | undefined>;
+  uniffiDestroy(): void;
+  static instanceOf(obj_: any): obj_ is Credential;
+}
+/**
+ * Whether the configured recovery sequence ran to a conclusive answer.
+ */
+export declare enum RecoveryStatus {
+  NotRequested = 0,
+  NotFound = 1,
+  Recovered = 2,
+  /**
+   * No credential was recovered and at least one required attempt failed or was skipped.
+   */
+  Incomplete = 3
+}
+export declare enum RecoveryIssue_Tags {
+  ComputeFailed = "ComputeFailed",
+  BindingFailed = "BindingFailed",
+  QueryRefused = "QueryRefused",
+  ContentFailed = "ContentFailed",
+  CapabilitiesUnavailable = "CapabilitiesUnavailable",
+  TooLarge = "TooLarge",
+  FetchFailed = "FetchFailed",
+  CandidateInvalid = "CandidateInvalid",
+  EndpointRefused = "EndpointRefused",
+  LimitReached = "LimitReached"
+}
+/**
+ * Why repository recovery did not complete cleanly, or why one candidate was omitted while another
+ * succeeded. Kept as data so a partial recovery never loses the rest of the lookup outcome, and
+ * each kind carries exactly what it is about.
+ */
+export declare const RecoveryIssue: Readonly<{
+  instanceOf: (obj: any) => obj is RecoveryIssue;
+  ComputeFailed: {
     new (inner: {
-      repository: string;
-      binderIndex: number;
-      algorithm: string;
+      alg: string;
       message: string;
     }): {
       /**
@@ -2165,18 +2408,14 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingQueryFailed;
+      readonly tag: RecoveryIssue_Tags.ComputeFailed;
       readonly inner: Readonly<{
-        repository: string;
-        binderIndex: number;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
     "new"(inner: {
-      repository: string;
-      binderIndex: number;
-      algorithm: string;
+      alg: string;
       message: string;
     }): {
       /**
@@ -2184,11 +2423,9 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingQueryFailed;
+      readonly tag: RecoveryIssue_Tags.ComputeFailed;
       readonly inner: Readonly<{
-        repository: string;
-        binderIndex: number;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
@@ -2198,19 +2435,17 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingQueryFailed;
+      readonly tag: RecoveryIssue_Tags.ComputeFailed;
       readonly inner: Readonly<{
-        repository: string;
-        binderIndex: number;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
   };
-  QueryRefused: {
+  BindingFailed: {
     new (inner: {
       repository: string;
-      algorithm: string;
+      alg: string;
       message: string;
     }): {
       /**
@@ -2218,16 +2453,16 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly tag: RecoveryIssue_Tags.BindingFailed;
       readonly inner: Readonly<{
         repository: string;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
     "new"(inner: {
       repository: string;
-      algorithm: string;
+      alg: string;
       message: string;
     }): {
       /**
@@ -2235,10 +2470,10 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly tag: RecoveryIssue_Tags.BindingFailed;
       readonly inner: Readonly<{
         repository: string;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
@@ -2248,17 +2483,18 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly tag: RecoveryIssue_Tags.BindingFailed;
       readonly inner: Readonly<{
         repository: string;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
   };
-  ContentFormUnsupported: {
+  QueryRefused: {
     new (inner: {
       repository: string;
+      alg: string;
       message: string;
     }): {
       /**
@@ -2266,14 +2502,16 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentFormUnsupported;
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
       readonly inner: Readonly<{
         repository: string;
+        alg: string;
         message: string;
       }>;
     };
     "new"(inner: {
       repository: string;
+      alg: string;
       message: string;
     }): {
       /**
@@ -2281,9 +2519,10 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentFormUnsupported;
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
       readonly inner: Readonly<{
         repository: string;
+        alg: string;
         message: string;
       }>;
     };
@@ -2293,17 +2532,18 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentFormUnsupported;
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
       readonly inner: Readonly<{
         repository: string;
+        alg: string;
         message: string;
       }>;
     };
   };
-  ContentQueryFailed: {
+  ContentFailed: {
     new (inner: {
       repository: string;
-      algorithm: string;
+      alg: string;
       message: string;
     }): {
       /**
@@ -2311,16 +2551,16 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentQueryFailed;
+      readonly tag: RecoveryIssue_Tags.ContentFailed;
       readonly inner: Readonly<{
         repository: string;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
     "new"(inner: {
       repository: string;
-      algorithm: string;
+      alg: string;
       message: string;
     }): {
       /**
@@ -2328,10 +2568,10 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentQueryFailed;
+      readonly tag: RecoveryIssue_Tags.ContentFailed;
       readonly inner: Readonly<{
         repository: string;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
@@ -2341,10 +2581,10 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentQueryFailed;
+      readonly tag: RecoveryIssue_Tags.ContentFailed;
       readonly inner: Readonly<{
         repository: string;
-        algorithm: string;
+        alg: string;
         message: string;
       }>;
     };
@@ -2393,31 +2633,31 @@ export declare const RecoveryIssue: Readonly<{
       }>;
     };
   };
-  ContentTooLarge: {
+  TooLarge: {
     new (inner: {
-      capBytes: bigint;
+      maxUploadBytes: bigint;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentTooLarge;
+      readonly tag: RecoveryIssue_Tags.TooLarge;
       readonly inner: Readonly<{
-        capBytes: bigint;
+        maxUploadBytes: bigint;
       }>;
     };
     "new"(inner: {
-      capBytes: bigint;
+      maxUploadBytes: bigint;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentTooLarge;
+      readonly tag: RecoveryIssue_Tags.TooLarge;
       readonly inner: Readonly<{
-        capBytes: bigint;
+        maxUploadBytes: bigint;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2426,13 +2666,13 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentTooLarge;
+      readonly tag: RecoveryIssue_Tags.TooLarge;
       readonly inner: Readonly<{
-        capBytes: bigint;
+        maxUploadBytes: bigint;
       }>;
     };
   };
-  CandidateFetchFailed: {
+  FetchFailed: {
     new (inner: {
       repository: string;
       manifestId: string;
@@ -2443,7 +2683,7 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CandidateFetchFailed;
+      readonly tag: RecoveryIssue_Tags.FetchFailed;
       readonly inner: Readonly<{
         repository: string;
         manifestId: string;
@@ -2460,7 +2700,7 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CandidateFetchFailed;
+      readonly tag: RecoveryIssue_Tags.FetchFailed;
       readonly inner: Readonly<{
         repository: string;
         manifestId: string;
@@ -2473,7 +2713,7 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CandidateFetchFailed;
+      readonly tag: RecoveryIssue_Tags.FetchFailed;
       readonly inner: Readonly<{
         repository: string;
         manifestId: string;
@@ -2574,7 +2814,7 @@ export declare const RecoveryIssue: Readonly<{
       }>;
     };
   };
-  ResourceLimitReached: {
+  LimitReached: {
     new (inner: {
       message: string;
     }): {
@@ -2583,7 +2823,7 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ResourceLimitReached;
+      readonly tag: RecoveryIssue_Tags.LimitReached;
       readonly inner: Readonly<{
         message: string;
       }>;
@@ -2596,7 +2836,7 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ResourceLimitReached;
+      readonly tag: RecoveryIssue_Tags.LimitReached;
       readonly inner: Readonly<{
         message: string;
       }>;
@@ -2607,7 +2847,7 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ResourceLimitReached;
+      readonly tag: RecoveryIssue_Tags.LimitReached;
       readonly inner: Readonly<{
         message: string;
       }>;
@@ -2619,7 +2859,7 @@ export declare const RecoveryIssue: Readonly<{
  * succeeded. Kept as data so a partial recovery never loses the rest of the lookup outcome, and
  * each kind carries exactly what it is about.
  */
-export type RecoveryIssue = InstanceType<typeof RecoveryIssue['BinderFailed' | 'AlgorithmDeprecated' | 'BindingUndeclared' | 'BindingQueryFailed' | 'QueryRefused' | 'ContentFormUnsupported' | 'ContentQueryFailed' | 'CapabilitiesUnavailable' | 'ContentTooLarge' | 'CandidateFetchFailed' | 'CandidateInvalid' | 'EndpointRefused' | 'ResourceLimitReached']>;
+export type RecoveryIssue = InstanceType<typeof RecoveryIssue['ComputeFailed' | 'BindingFailed' | 'QueryRefused' | 'ContentFailed' | 'CapabilitiesUnavailable' | 'TooLarge' | 'FetchFailed' | 'CandidateInvalid' | 'EndpointRefused' | 'LimitReached']>;
 /**
  * Repository recovery outcome and every non-fatal issue encountered on the way.
  */
@@ -2635,151 +2875,43 @@ export declare const RecoverySummary: Readonly<{
   new: (partial: Partial<RecoverySummary> & Required<Omit<RecoverySummary, never>>) => RecoverySummary;
   defaults: () => Partial<RecoverySummary>;
 }>;
-export declare enum GoldenComparison_Tags {
-  NotRequested = "NotRequested",
-  NoEmbeddedManifest = "NoEmbeddedManifest",
-  NoRecoveredManifest = "NoRecoveredManifest",
-  RecoveryIncomplete = "RecoveryIncomplete",
+export declare enum Golden_Tags {
   Matches = "Matches",
   Differs = "Differs",
   NoneMatches = "NoneMatches",
   Unreadable = "Unreadable"
 }
 /**
- * Typed completion of C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison:
- * the local active manifest against what the repository holds. Every outcome is its own variant.
+ * C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison: the embedded active
+ * manifest against what the repository holds.
  */
-export declare const GoldenComparison: Readonly<{
-  instanceOf: (obj: any) => obj is GoldenComparison;
-  NotRequested: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NotRequested;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NotRequested;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NotRequested;
-    };
-  };
-  NoEmbeddedManifest: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoEmbeddedManifest;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoEmbeddedManifest;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoEmbeddedManifest;
-    };
-  };
-  NoRecoveredManifest: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoRecoveredManifest;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoRecoveredManifest;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoRecoveredManifest;
-    };
-  };
-  RecoveryIncomplete: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.RecoveryIncomplete;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.RecoveryIncomplete;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.RecoveryIncomplete;
-    };
-  };
+export declare const Golden: Readonly<{
+  instanceOf: (obj: any) => obj is Golden;
   Matches: {
     new (inner: {
-      recoveredIndex: number;
+      index: number;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Matches;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Matches;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
     "new"(inner: {
-      recoveredIndex: number;
+      index: number;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Matches;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Matches;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2787,38 +2919,38 @@ export declare const GoldenComparison: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Matches;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Matches;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
   };
   Differs: {
     new (inner: {
-      recoveredIndex: number;
+      index: number;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Differs;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Differs;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
     "new"(inner: {
-      recoveredIndex: number;
+      index: number;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Differs;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Differs;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2826,10 +2958,10 @@ export declare const GoldenComparison: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Differs;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Differs;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
   };
@@ -2841,8 +2973,8 @@ export declare const GoldenComparison: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoneMatches;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.NoneMatches;
       readonly inner: Readonly<{
         candidates: Array<number>;
       }>;
@@ -2854,8 +2986,8 @@ export declare const GoldenComparison: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoneMatches;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.NoneMatches;
       readonly inner: Readonly<{
         candidates: Array<number>;
       }>;
@@ -2865,8 +2997,8 @@ export declare const GoldenComparison: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.NoneMatches;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.NoneMatches;
       readonly inner: Readonly<{
         candidates: Array<number>;
       }>;
@@ -2874,29 +3006,29 @@ export declare const GoldenComparison: Readonly<{
   };
   Unreadable: {
     new (inner: {
-      recoveredIndex: number;
+      index: number;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Unreadable;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Unreadable;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
     "new"(inner: {
-      recoveredIndex: number;
+      index: number;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Unreadable;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Unreadable;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2904,19 +3036,19 @@ export declare const GoldenComparison: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "GoldenComparison";
-      readonly tag: GoldenComparison_Tags.Unreadable;
+      readonly [uniffiTypeNameSymbol]: "Golden";
+      readonly tag: Golden_Tags.Unreadable;
       readonly inner: Readonly<{
-        recoveredIndex: number;
+        index: number;
       }>;
     };
   };
 }>;
 /**
- * Typed completion of C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison:
- * the local active manifest against what the repository holds. Every outcome is its own variant.
+ * C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison: the embedded active
+ * manifest against what the repository holds.
  */
-export type GoldenComparison = InstanceType<typeof GoldenComparison['NotRequested' | 'NoEmbeddedManifest' | 'NoRecoveredManifest' | 'RecoveryIncomplete' | 'Matches' | 'Differs' | 'NoneMatches' | 'Unreadable']>;
+export type Golden = InstanceType<typeof Golden['Matches' | 'Differs' | 'NoneMatches' | 'Unreadable']>;
 /**
  * The evidence that singled a recovered verdict out.
  */
@@ -3182,25 +3314,26 @@ export declare const Verdict: Readonly<{
 export type Verdict = InstanceType<typeof Verdict['Unsigned' | 'Inconclusive' | 'Embedded' | 'Recovered' | 'RecoveredDerivative' | 'Ambiguous']>;
 /**
  * Complete asset verification result: every credential, the recovery state, the C2PA
- * golden-flow comparison, and the verdict the SDK's rules choose. See [`asset::Verdict`].
+ * golden-flow comparison when there was something to compare, and the verdict the SDK's rules
+ * choose. See [`asset::Verdict`].
  */
 export type AssetVerification = {
-  credentials: Array<Credential>;
+  credentials: Array<CredentialLike>;
   recovery: RecoverySummary;
-  goldenComparison: GoldenComparison;
+  golden?: Golden;
   verdict: Verdict;
 };
 /**
  * Generated factory for {@link AssetVerification} record objects.
  */
 export declare const AssetVerification: Readonly<{
-  create: (partial: Partial<AssetVerification> & Required<Omit<AssetVerification, never>>) => AssetVerification;
-  new: (partial: Partial<AssetVerification> & Required<Omit<AssetVerification, never>>) => AssetVerification;
+  create: (partial: Partial<AssetVerification> & Required<Omit<AssetVerification, "golden">>) => AssetVerification;
+  new: (partial: Partial<AssetVerification> & Required<Omit<AssetVerification, "golden">>) => AssetVerification;
   defaults: () => Partial<AssetVerification>;
 }>;
 export declare enum Repository_Tags {
   Named = "Named",
-  Listed = "Listed"
+  Registered = "Registered"
 }
 /**
  * One C2PA manifest repository, as the Soft Binding Resolution API spec lets a client find it.
@@ -3251,31 +3384,31 @@ export declare const Repository: Readonly<{
       }>;
     };
   };
-  Listed: {
+  Registered: {
     new (inner: {
-      algorithm: string;
+      alg: string;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "Repository";
-      readonly tag: Repository_Tags.Listed;
+      readonly tag: Repository_Tags.Registered;
       readonly inner: Readonly<{
-        algorithm: string;
+        alg: string;
       }>;
     };
     "new"(inner: {
-      algorithm: string;
+      alg: string;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "Repository";
-      readonly tag: Repository_Tags.Listed;
+      readonly tag: Repository_Tags.Registered;
       readonly inner: Readonly<{
-        algorithm: string;
+        alg: string;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -3284,9 +3417,9 @@ export declare const Repository: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "Repository";
-      readonly tag: Repository_Tags.Listed;
+      readonly tag: Repository_Tags.Registered;
       readonly inner: Readonly<{
-        algorithm: string;
+        alg: string;
       }>;
     };
   };
@@ -3294,218 +3427,265 @@ export declare const Repository: Readonly<{
 /**
  * One C2PA manifest repository, as the Soft Binding Resolution API spec lets a client find it.
  */
-export type Repository = InstanceType<typeof Repository['Named' | 'Listed']>;
+export type Repository = InstanceType<typeof Repository['Named' | 'Registered']>;
 /**
- * Construction options for [`AssetVerifier::new`] (and the `AssetVerifier.create` JS
- * binding). Every field is stated: nothing here is chosen on the caller's behalf.
- *
- * One definition, all lanes: `#[binding]` derives the shapes directly here:
- * tsify (camelCase) on wasm, a `uniffi::Record` on the native `ffi` build, so there is no
- * per-lane DTO copy. Off both lanes it is a plain struct.
+ * What a verifier trusts. An omitted list trusts nothing.
  */
-export type AssetVerifierOptions = {
+export type Trust = {
   /**
-   * The C2PA manifest repositories recovery asks, each a Soft Binding Resolution API declared
-   * for exactly the algorithms it may be asked for. Results merge by manifest, and a match's
-   * `endpoint` is fetched from only when it names one of these. Empty: no recovery can be
-   * asked of this verifier.
+   * PEM anchors for the manifest signers the caller trusts.
    */
-  repositories: Array<Repository>;
+  anchors: Array<string>;
   /**
-   * PEM trust anchors for the manifest signers the caller trusts.
+   * PEM anchors for the time-stamping authorities the caller trusts.
    */
-  trustAnchors: Array<string>;
+  tsaAnchors: Array<string>;
   /**
-   * PEM trust anchors for the time-stamping authorities the caller trusts.
+   * Also trust the bundled official C2PA manifest and TSA lists, beside the caller's.
    */
-  tsaTrustAnchors: Array<string>;
+  c2pa: boolean;
   /**
-   * Also trust the bundled official C2PA anchors, manifest and TSA lists, beside the
-   * caller's. `false` trusts the caller's lists alone.
+   * Issuer DIDs whose CAWG identity (ICA) credentials count as validated, matched exactly
+   * against the credential issuer. Empty trusts no issuer: every identity assertion then
+   * reports `cawg.ica.untrusted_issuer` and withholds `cawg.ica.credential_valid`, which leaves
+   * the manifest's own validity untouched.
    */
-  trustC2paAnchors: boolean;
+  icaIssuers: Array<string>;
+};
+/**
+ * Generated factory for {@link Trust} record objects.
+ */
+export declare const Trust: Readonly<{
+  create: (partial: Partial<Trust> & Required<Omit<Trust, "anchors" | "icaIssuers" | "tsaAnchors">>) => Trust;
+  new: (partial: Partial<Trust> & Required<Omit<Trust, "anchors" | "icaIssuers" | "tsaAnchors">>) => Trust;
+  defaults: () => Partial<Trust>;
+}>;
+/**
+ * What an asset verifier trusts and which repositories it may ask. An omitted list trusts or
+ * asks nothing.
+ */
+export type AssetVerifierOptions = {
   /**
-   * Issuer DIDs whose CAWG identity (ICA) credentials count as validated, matched
-   * exactly against the credential issuer. Empty trusts no issuer: every identity assertion
-   * then reports `cawg.ica.untrusted_issuer` and withholds `cawg.ica.credential_valid`,
-   * which leaves the manifest's own validity untouched.
+   * The C2PA manifest repositories recovery asks, each a Soft Binding Resolution API declared
+   * for exactly the algorithms it may be asked for. Results merge by manifest, and a match's
+   * `endpoint` is fetched from only when it names one of these. Empty: no recovery can be
+   * asked of this verifier.
    */
-  trustedIcaIssuers: Array<string>;
+  repositories: Array<Repository>;
+  trust: Trust;
 };
 /**
  * Generated factory for {@link AssetVerifierOptions} record objects.
  */
 export declare const AssetVerifierOptions: Readonly<{
-  create: (partial: Partial<AssetVerifierOptions> & Required<Omit<AssetVerifierOptions, never>>) => AssetVerifierOptions;
-  new: (partial: Partial<AssetVerifierOptions> & Required<Omit<AssetVerifierOptions, never>>) => AssetVerifierOptions;
+  create: (partial: Partial<AssetVerifierOptions> & Required<Omit<AssetVerifierOptions, "repositories">>) => AssetVerifierOptions;
+  new: (partial: Partial<AssetVerifierOptions> & Required<Omit<AssetVerifierOptions, "repositories">>) => AssetVerifierOptions;
   defaults: () => Partial<AssetVerifierOptions>;
 }>;
 /**
- * Whether a content form runs on this verify. Judged against the byBinding results alone.
+ * A `soft-binding-timespan-map`: where the range starts in the media and how long it lasts, in
+ * whole milliseconds.
  */
-export declare enum ContentTrigger {
-  /**
-   * Only when no binder's lookup resolved a manifest.
-   */
-  ByBindingMisses = 0,
-  /**
-   * On every verify, beside the byBinding results: corroboration, and the golden flows.
-   */
-  Always = 1
-}
+export type Timespan = {
+  start: number;
+  duration: number;
+};
+/**
+ * Generated factory for {@link Timespan} record objects.
+ */
+export declare const Timespan: Readonly<{
+  create: (partial: Partial<Timespan> & Required<Omit<Timespan, never>>) => Timespan;
+  new: (partial: Partial<Timespan> & Required<Omit<Timespan, never>>) => Timespan;
+  defaults: () => Partial<Timespan>;
+}>;
 /**
- * `matches/byContent`: the asset is uploaded to each repository, one request per algorithm that
- * repository is declared for.
+ * A `soft-binding-scope-map`: where in the content a value applies. Empty is the whole content.
  */
-export type ByContent = {
-  after: ContentTrigger;
+export type Scope = {
+  timespan?: Timespan;
 };
 /**
- * Generated factory for {@link ByContent} record objects.
+ * Generated factory for {@link Scope} record objects.
  */
-export declare const ByContent: Readonly<{
-  create: (partial: Partial<ByContent> & Required<Omit<ByContent, never>>) => ByContent;
-  new: (partial: Partial<ByContent> & Required<Omit<ByContent, never>>) => ByContent;
-  defaults: () => Partial<ByContent>;
+export declare const Scope: Readonly<{
+  create: (partial: Partial<Scope> & Required<Omit<Scope, "timespan">>) => Scope;
+  new: (partial: Partial<Scope> & Required<Omit<Scope, "timespan">>) => Scope;
+  defaults: () => Partial<Scope>;
 }>;
 /**
- * [`crate::asset::ByReference`] with the region as the reader's own `Range` record, so a range
- * read off one credential's actions scopes the query for another.
+ * A `soft-binding-block-map`.
  */
-export type ByReference = {
-  after: ContentTrigger;
-  url: string;
-  length: bigint;
-  mediaType?: string;
-  region: Array<Range>;
+export type Block = {
+  value: ArrayBuffer;
+  scope: Scope;
 };
 /**
- * Generated factory for {@link ByReference} record objects.
+ * Generated factory for {@link Block} record objects.
  */
-export declare const ByReference: Readonly<{
-  create: (partial: Partial<ByReference> & Required<Omit<ByReference, "mediaType">>) => ByReference;
-  new: (partial: Partial<ByReference> & Required<Omit<ByReference, "mediaType">>) => ByReference;
-  defaults: () => Partial<ByReference>;
+export declare const Block: Readonly<{
+  create: (partial: Partial<Block> & Required<Omit<Block, "scope">>) => Block;
+  new: (partial: Partial<Block> & Required<Omit<Block, "scope">>) => Block;
+  defaults: () => Partial<Block>;
 }>;
-export declare enum AssetFormat_Tags {
-  Sniff = "Sniff",
-  Declared = "Declared"
-}
 /**
- * The format of the asset a call is handed. Stated, never defaulted: sniffing is a choice the
- * caller makes by name, not what happens when they say nothing.
+ * A byte range holding a bare C2PA manifest store, or reserved for one. A record of
+ * primitives, so a plugin in its OWN UniFFI namespace declares a structurally identical
+ * one and the two cross the boundary without sharing a Rust type.
  */
-export declare const AssetFormat: Readonly<{
-  instanceOf: (obj: any) => obj is AssetFormat;
-  Sniff: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "AssetFormat";
-      readonly tag: AssetFormat_Tags.Sniff;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "AssetFormat";
-      readonly tag: AssetFormat_Tags.Sniff;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "AssetFormat";
-      readonly tag: AssetFormat_Tags.Sniff;
-    };
-  };
-  Declared: {
-    new (inner: {
-      mediaType: string;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "AssetFormat";
-      readonly tag: AssetFormat_Tags.Declared;
-      readonly inner: Readonly<{
-        mediaType: string;
-      }>;
-    };
-    "new"(inner: {
-      mediaType: string;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "AssetFormat";
-      readonly tag: AssetFormat_Tags.Declared;
-      readonly inner: Readonly<{
-        mediaType: string;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "AssetFormat";
-      readonly tag: AssetFormat_Tags.Declared;
-      readonly inner: Readonly<{
-        mediaType: string;
-      }>;
-    };
-  };
+export type ByteRange = {
+  offset: bigint;
+  length: bigint;
+};
+/**
+ * Generated factory for {@link ByteRange} record objects.
+ */
+export declare const ByteRange: Readonly<{
+  create: (partial: Partial<ByteRange> & Required<Omit<ByteRange, never>>) => ByteRange;
+  new: (partial: Partial<ByteRange> & Required<Omit<ByteRange, never>>) => ByteRange;
+  defaults: () => Partial<ByteRange>;
 }>;
 /**
- * The format of the asset a call is handed. Stated, never defaulted: sniffing is a choice the
- * caller makes by name, not what happens when they say nothing.
+ * The host-supplied ranged reader: `length()` returns the asset size in bytes, `read_at`
+ * reads `length` bytes starting at `offset`. Each call crosses the FFI boundary, and the
+ * caller controls the backing store (memory, file, S3, HTTP, custom).
+ *
+ * # Both methods are async
+ *
+ * Because storage is: an object store is a round trip, and so is anything behind `fetch`. A
+ * synchronous `read_at` forces every such caller to make the asset local first, which is a
+ * whole copy of a file that may be hundreds of gigabytes, to answer reads the SDK was going to
+ * make one window at a time anyway. Implement this over `aiobotocore`, an S3 client, a ranged
+ * `fetch`, or a plain file, and await whatever it takes.
+ *
+ * The SDK never calls back into the thread that called it (see [`task`](super::task)), so an
+ * implementation is free to be as slow as its storage is.
+ *
+ * # Both methods are fallible
+ *
+ * They have to be: an infallible `read_at` can only report a failed read as a short one, which
+ * is indistinguishable from a legitimate end of file, so an S3 timeout would silently verify or
+ * sign a truncated asset.
+ */
+export interface RangeSource {
+  length(asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<bigint>;
+  readAt(offset: bigint, length: number, asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<ArrayBuffer>;
+}
+/**
+ * The host-supplied ranged reader: `length()` returns the asset size in bytes, `read_at`
+ * reads `length` bytes starting at `offset`. Each call crosses the FFI boundary, and the
+ * caller controls the backing store (memory, file, S3, HTTP, custom).
+ *
+ * # Both methods are async
+ *
+ * Because storage is: an object store is a round trip, and so is anything behind `fetch`. A
+ * synchronous `read_at` forces every such caller to make the asset local first, which is a
+ * whole copy of a file that may be hundreds of gigabytes, to answer reads the SDK was going to
+ * make one window at a time anyway. Implement this over `aiobotocore`, an S3 client, a ranged
+ * `fetch`, or a plain file, and await whatever it takes.
+ *
+ * The SDK never calls back into the thread that called it (see [`task`](super::task)), so an
+ * implementation is free to be as slow as its storage is.
+ *
+ * # Both methods are fallible
+ *
+ * They have to be: an infallible `read_at` can only report a failed read as a short one, which
+ * is indistinguishable from a legitimate end of file, so an S3 timeout would silently verify or
+ * sign a truncated asset.
  */
-export type AssetFormat = InstanceType<typeof AssetFormat['Sniff' | 'Declared']>;
+export declare class RangeSourceImpl extends UniffiAbstractObject implements RangeSource {
+  readonly [uniffiTypeNameSymbol] = "RangeSourceImpl";
+  readonly [destructorGuardSymbol]: UniffiGcObject;
+  readonly [pointerLiteralSymbol]: UniffiHandle;
+  private constructor();
+  length(asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<bigint>;
+  readAt(offset: bigint, length: number, asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<ArrayBuffer>;
+  uniffiDestroy(): void;
+  static instanceOf(obj_: any): obj_ is RangeSourceImpl;
+}
 /**
- * Everything one [`Binder::derive`] needs beyond the asset.
+ * What one [`Compute::compute`] is asked: the asset and its media type.
  */
-export type DeriveOptions = {
-  format: AssetFormat;
+export type ComputeRequest = {
+  source: RangeSource;
+  format: string;
 };
 /**
- * Generated factory for {@link DeriveOptions} record objects.
+ * Generated factory for {@link ComputeRequest} record objects.
  */
-export declare const DeriveOptions: Readonly<{
-  create: (partial: Partial<DeriveOptions> & Required<Omit<DeriveOptions, never>>) => DeriveOptions;
-  new: (partial: Partial<DeriveOptions> & Required<Omit<DeriveOptions, never>>) => DeriveOptions;
-  defaults: () => Partial<DeriveOptions>;
+export declare const ComputeRequest: Readonly<{
+  create: (partial: Partial<ComputeRequest> & Required<Omit<ComputeRequest, never>>) => ComputeRequest;
+  new: (partial: Partial<ComputeRequest> & Required<Omit<ComputeRequest, never>>) => ComputeRequest;
+  defaults: () => Partial<ComputeRequest>;
 }>;
 /**
- * One `google.rpc.BadRequest.FieldViolation`: a request field that failed a constraint.
+ * Whether a content form runs on this verify. Judged against the byBinding results alone.
  */
-export type FieldViolation = {
+export declare enum ContentWhen {
   /**
-   * A dotted proto path to the offending field (`""` for a message-level rule).
+   * Only when the by-value (byBinding) lookup found nothing.
    */
-  field: string;
+  BindingMisses = 0,
   /**
-   * Human-readable explanation of the violation.
+   * On every verify, beside the byBinding results: corroboration, and the golden flows.
    */
-  description: string;
+  Always = 1
+}
+/**
+ * An asset a repository downloads, as the `byReference` request body names it.
+ */
+export type Reference = {
   /**
-   * The constraint id that failed (a protovalidate/CEL rule id), stable across releases.
+   * A short-lived https URL without credentials.
    */
-  reason: string;
+  url: string;
+  /**
+   * The asset's size in bytes.
+   */
+  length: bigint;
+  /**
+   * The asset's media type.
+   */
+  format?: string;
+  ranges: Array<Range>;
 };
 /**
- * Generated factory for {@link FieldViolation} record objects.
+ * Generated factory for {@link Reference} record objects.
  */
-export declare const FieldViolation: Readonly<{
-  create: (partial: Partial<FieldViolation> & Required<Omit<FieldViolation, never>>) => FieldViolation;
-  new: (partial: Partial<FieldViolation> & Required<Omit<FieldViolation, never>>) => FieldViolation;
-  defaults: () => Partial<FieldViolation>;
+export declare const Reference: Readonly<{
+  create: (partial: Partial<Reference> & Required<Omit<Reference, "format" | "ranges">>) => Reference;
+  new: (partial: Partial<Reference> & Required<Omit<Reference, "format" | "ranges">>) => Reference;
+  defaults: () => Partial<Reference>;
+}>;
+/**
+ * The query a repository answers from the content: `matches/byReference` when `reference` is
+ * stated, so nothing is uploaded, else `matches/byContent` with the asset in the request.
+ */
+export type Content = {
+  when: ContentWhen;
+  /**
+   * Where each repository downloads the asset from.
+   */
+  reference?: Reference;
+  /**
+   * The largest asset an upload sends, in bytes; a larger one is reported `TooLarge`.
+   */
+  maxUploadBytes: bigint;
+};
+/**
+ * Generated factory for {@link Content} record objects.
+ */
+export declare const Content: Readonly<{
+  create: (partial: Partial<Content> & Required<Omit<Content, "maxUploadBytes" | "reference">>) => Content;
+  new: (partial: Partial<Content> & Required<Omit<Content, "maxUploadBytes" | "reference">>) => Content;
+  defaults: () => Partial<Content>;
 }>;
 /**
  * Whether a code is a success, an informational note, or a failure.
@@ -3542,23 +3722,23 @@ export declare const ValidationCode: Readonly<{
 /**
  * A session signing key from the init manifest's roster (spec §19.4.4).
  */
-export type SessionKeySummary = {
+export type SessionKey = {
   /**
    * Identifier of the session signing key.
    */
-  keyId: ArrayBuffer;
+  kid: ArrayBuffer;
   /**
    * The session key's public half (SEC1-encoded bytes).
    */
   publicKey: ArrayBuffer;
 };
 /**
- * Generated factory for {@link SessionKeySummary} record objects.
+ * Generated factory for {@link SessionKey} record objects.
  */
-export declare const SessionKeySummary: Readonly<{
-  create: (partial: Partial<SessionKeySummary> & Required<Omit<SessionKeySummary, never>>) => SessionKeySummary;
-  new: (partial: Partial<SessionKeySummary> & Required<Omit<SessionKeySummary, never>>) => SessionKeySummary;
-  defaults: () => Partial<SessionKeySummary>;
+export declare const SessionKey: Readonly<{
+  create: (partial: Partial<SessionKey> & Required<Omit<SessionKey, never>>) => SessionKey;
+  new: (partial: Partial<SessionKey> & Required<Omit<SessionKey, never>>) => SessionKey;
+  defaults: () => Partial<SessionKey>;
 }>;
 /**
  * Outcome of validating a stream's init segment.
@@ -3575,7 +3755,7 @@ export type InitValidation = {
    * The init segment's c2pa manifest store.
    */
   manifest: ManifestStore;
-  sessionKeys: Array<SessionKeySummary>;
+  sessionKeys: Array<SessionKey>;
 };
 /**
  * Generated factory for {@link InitValidation} record objects.
@@ -3586,37 +3766,36 @@ export declare const InitValidation: Readonly<{
   defaults: () => Partial<InitValidation>;
 }>;
 /**
- * Timing facts carried by a media segment's container.
+ * Timing a media segment's container carries.
  */
 export type SegmentTiming = {
   /**
-   * Media segment sequence number (exact below 2^53).
-   */
-  sequenceNumber: bigint;
-  /**
-   * MP4 timescale (ticks per second) for this segment's timing, if present.
+   * The segment's `sequenceNumber` (exact below 2^53).
    */
-  timescale?: number;
+  sequence: bigint;
   /**
-   * Segment duration in seconds, if the container reports it.
+   * The span its C2PA `emsg` covers.
    */
-  eventDurationSecs?: number;
+  duration?: number;
 };
 /**
  * Generated factory for {@link SegmentTiming} record objects.
  */
 export declare const SegmentTiming: Readonly<{
-  create: (partial: Partial<SegmentTiming> & Required<Omit<SegmentTiming, "eventDurationSecs" | "timescale">>) => SegmentTiming;
-  new: (partial: Partial<SegmentTiming> & Required<Omit<SegmentTiming, "eventDurationSecs" | "timescale">>) => SegmentTiming;
+  create: (partial: Partial<SegmentTiming> & Required<Omit<SegmentTiming, "duration">>) => SegmentTiming;
+  new: (partial: Partial<SegmentTiming> & Required<Omit<SegmentTiming, "duration">>) => SegmentTiming;
   defaults: () => Partial<SegmentTiming>;
 }>;
 /**
  * Outcome of validating a media segment against its stream's init.
  */
 export type MediaValidation = {
-  valid: boolean;
+  /**
+   * `Invalid` on any failure, else the state of the init manifest the segment's key came from.
+   */
+  state: ValidationState;
   codes: Array<ValidationCode>;
-  keyId: ArrayBuffer;
+  kid: ArrayBuffer;
   timing: SegmentTiming;
   manifestId: string;
 };
@@ -3629,7 +3808,7 @@ export declare const MediaValidation: Readonly<{
   defaults: () => Partial<MediaValidation>;
 }>;
 /**
- * When [`AssetVerifier::verify_asset`] queries the repository.
+ * When a verify asks the repositories.
  */
 export declare enum RecoveryTrigger {
   /**
@@ -3649,551 +3828,222 @@ export declare enum RecoveryTrigger {
    * It queries the repository on every verify, without making it load-bearing on the asset's own
    * credential: the flow provides information about a substitution rather than gating the local
    * manifest, so a repository that cannot be reached leaves [`RecoveryStatus::Incomplete`], the
-   * reason as a [`RecoveryIssue`], and [`GoldenComparison::RecoveryIncomplete`]. A caller for whom a
-   * cross-check that never ran must not pass for agreement branches on that status.
+   * reason as a [`RecoveryIssue`], and no [`Golden`]. A caller for whom a cross-check that never
+   * ran must not pass for agreement branches on that status.
    */
   Always = 1
 }
 /**
- * A canonical gRPC/Connect status code: the coarse, closed failure class.
- *
- * The wasm lane projects this as a camelCase string like every other tagged value
- * there, so a consumer narrows on `err.code === "resourceExhausted"`; the native lane
- * projects an enum.
+ * Computes one soft-binding algorithm's values from an asset (a fingerprint calculated, a
+ * watermark detected). `[]` is "no value here"; an error is "no trustworthy answer", so a failed
+ * engine never reads as an unmarked asset.
  */
-export declare enum Code {
-  Canceled = 0,
-  Unknown = 1,
-  InvalidArgument = 2,
-  DeadlineExceeded = 3,
-  NotFound = 4,
-  AlreadyExists = 5,
-  PermissionDenied = 6,
-  ResourceExhausted = 7,
-  FailedPrecondition = 8,
-  Aborted = 9,
-  OutOfRange = 10,
-  Unimplemented = 11,
-  Internal = 12,
-  Unavailable = 13,
-  DataLoss = 14,
-  Unauthenticated = 15
+export interface Compute {
+  /**
+   * The C2PA soft-binding algorithm list label, e.g. `io.iscc.v0`.
+   */
+  alg(): string;
+  compute(request: ComputeRequest, asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<Array<Block>>;
 }
-export declare enum SdkError_Tags {
-  Reason = "Reason",
-  Invalid = "Invalid",
-  Status = "Status"
+/**
+ * Computes one soft-binding algorithm's values from an asset (a fingerprint calculated, a
+ * watermark detected). `[]` is "no value here"; an error is "no trustworthy answer", so a failed
+ * engine never reads as an unmarked asset.
+ */
+export declare class ComputeImpl extends UniffiAbstractObject implements Compute {
+  readonly [uniffiTypeNameSymbol] = "ComputeImpl";
+  readonly [destructorGuardSymbol]: UniffiGcObject;
+  readonly [pointerLiteralSymbol]: UniffiHandle;
+  private constructor();
+  /**
+   * The C2PA soft-binding algorithm list label, e.g. `io.iscc.v0`.
+   */
+  alg(): string;
+  compute(request: ComputeRequest, asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<Array<Block>>;
+  uniffiDestroy(): void;
+  static instanceOf(obj_: any): obj_ is ComputeImpl;
+}
+export declare enum SoftBindingSource_Tags {
+  Builtin = "Builtin",
+  Held = "Held",
+  Custom = "Custom"
 }
 /**
- * The error every SDK call throws: a decoded `google.rpc.Status`, discriminated
- * as a semantic reason, a request validation, or a bare status. `code` and `message`
- * are common to every variant.
+ * Where one byBinding query's value comes from.
  */
-export declare const SdkError: Readonly<{
-  instanceOf: (obj: any) => obj is SdkError;
-  Reason: {
-    new (inner: {
-      code: Code;
-      message: string;
-      reason: string;
-      domain: string;
-      metadata: Map<string, string>;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Reason;
-      readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        reason: string;
-        domain: string;
-        metadata: Map<string, string>;
-      }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    };
-    "new"(inner: {
-      code: Code;
-      message: string;
-      reason: string;
-      domain: string;
-      metadata: Map<string, string>;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Reason;
-      readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        reason: string;
-        domain: string;
-        metadata: Map<string, string>;
-      }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Reason;
-      readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        reason: string;
-        domain: string;
-        metadata: Map<string, string>;
-      }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    };
-    hasInner(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Reason;
-      readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        reason: string;
-        domain: string;
-        metadata: Map<string, string>;
-      }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    };
-    getInner(obj: {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Reason;
-      readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        reason: string;
-        domain: string;
-        metadata: Map<string, string>;
-      }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    }): Readonly<{
-      code: Code;
-      message: string;
-      reason: string;
-      domain: string;
-      metadata: Map<string, string>;
-    }>;
-    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
-    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
-    stackTraceLimit: number;
-  };
-  Invalid: {
+export declare const SoftBindingSource: Readonly<{
+  instanceOf: (obj: any) => obj is SoftBindingSource;
+  Builtin: {
     new (inner: {
-      code: Code;
-      message: string;
-      fieldViolations: Array<FieldViolation>;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Invalid;
-      readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        fieldViolations: Array<FieldViolation>;
-      }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    };
-    "new"(inner: {
-      code: Code;
-      message: string;
-      fieldViolations: Array<FieldViolation>;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Invalid;
-      readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        fieldViolations: Array<FieldViolation>;
-      }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    };
-    instanceOf(obj: any): obj is {
+      alg: string;
+    }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Invalid;
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Builtin;
       readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        fieldViolations: Array<FieldViolation>;
+        alg: string;
       }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
     };
-    hasInner(obj: any): obj is {
+    "new"(inner: {
+      alg: string;
+    }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Invalid;
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Builtin;
       readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        fieldViolations: Array<FieldViolation>;
+        alg: string;
       }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
     };
-    getInner(obj: {
+    instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Invalid;
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Builtin;
       readonly inner: Readonly<{
-        code: Code;
-        message: string;
-        fieldViolations: Array<FieldViolation>;
+        alg: string;
       }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    }): Readonly<{
-      code: Code;
-      message: string;
-      fieldViolations: Array<FieldViolation>;
-    }>;
-    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
-    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
-    stackTraceLimit: number;
+    };
   };
-  Status: {
+  Held: {
     new (inner: {
-      code: Code;
-      message: string;
+      alg: string;
+      value: ArrayBuffer;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Status;
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Held;
       readonly inner: Readonly<{
-        code: Code;
-        message: string;
+        alg: string;
+        value: ArrayBuffer;
       }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
     };
     "new"(inner: {
-      code: Code;
-      message: string;
+      alg: string;
+      value: ArrayBuffer;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Status;
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Held;
       readonly inner: Readonly<{
-        code: Code;
-        message: string;
+        alg: string;
+        value: ArrayBuffer;
       }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
     };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Status;
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Held;
       readonly inner: Readonly<{
-        code: Code;
-        message: string;
+        alg: string;
+        value: ArrayBuffer;
       }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
     };
-    hasInner(obj: any): obj is {
+  };
+  Custom: {
+    new (inner: {
+      compute: Compute;
+    }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Status;
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Custom;
       readonly inner: Readonly<{
-        code: Code;
-        message: string;
+        compute: Compute;
       }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
     };
-    getInner(obj: {
+    "new"(inner: {
+      compute: Compute;
+    }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "SdkError";
-      readonly tag: SdkError_Tags.Status;
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Custom;
       readonly inner: Readonly<{
-        code: Code;
-        message: string;
+        compute: Compute;
       }>;
-      name: string;
-      message: string;
-      stack?: string;
-      cause?: unknown;
-    }): Readonly<{
-      code: Code;
-      message: string;
-    }>;
-    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
-    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
-    stackTraceLimit: number;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "SoftBindingSource";
+      readonly tag: SoftBindingSource_Tags.Custom;
+      readonly inner: Readonly<{
+        compute: Compute;
+      }>;
+    };
   };
 }>;
 /**
- * The error every SDK call throws: a decoded `google.rpc.Status`, discriminated
- * as a semantic reason, a request validation, or a bare status. `code` and `message`
- * are common to every variant.
- */
-export type SdkError = InstanceType<typeof SdkError['Reason' | 'Invalid' | 'Status']>;
-/**
- * The host-supplied ranged reader: `length()` returns the asset size in bytes, `read_at`
- * reads `length` bytes starting at `offset`. Each call crosses the FFI boundary, and the
- * caller controls the backing store (memory, file, S3, HTTP, custom).
- *
- * # Both methods are async
- *
- * Because storage is: an object store is a round trip, and so is anything behind `fetch`. A
- * synchronous `read_at` forces every such caller to make the asset local first, which is a
- * whole copy of a file that may be hundreds of gigabytes, to answer reads the SDK was going to
- * make one window at a time anyway. Implement this over `aiobotocore`, an S3 client, a ranged
- * `fetch`, or a plain file, and await whatever it takes.
- *
- * The SDK never calls back into the thread that called it (see [`task`](super::task)), so an
- * implementation is free to be as slow as its storage is.
- *
- * # Both methods are fallible
- *
- * They have to be: an infallible `read_at` can only report a failed read as a short one, which
- * is indistinguishable from a legitimate end of file, so an S3 timeout would silently verify or
- * sign a truncated asset.
- */
-export interface RangeSource {
-  length(asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<bigint>;
-  readAt(offset: bigint, length: number, asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<ArrayBuffer>;
-}
-/**
- * The host-supplied ranged reader: `length()` returns the asset size in bytes, `read_at`
- * reads `length` bytes starting at `offset`. Each call crosses the FFI boundary, and the
- * caller controls the backing store (memory, file, S3, HTTP, custom).
- *
- * # Both methods are async
- *
- * Because storage is: an object store is a round trip, and so is anything behind `fetch`. A
- * synchronous `read_at` forces every such caller to make the asset local first, which is a
- * whole copy of a file that may be hundreds of gigabytes, to answer reads the SDK was going to
- * make one window at a time anyway. Implement this over `aiobotocore`, an S3 client, a ranged
- * `fetch`, or a plain file, and await whatever it takes.
- *
- * The SDK never calls back into the thread that called it (see [`task`](super::task)), so an
- * implementation is free to be as slow as its storage is.
- *
- * # Both methods are fallible
- *
- * They have to be: an infallible `read_at` can only report a failed read as a short one, which
- * is indistinguishable from a legitimate end of file, so an S3 timeout would silently verify or
- * sign a truncated asset.
- */
-export declare class RangeSourceImpl extends UniffiAbstractObject implements RangeSource {
-  readonly [uniffiTypeNameSymbol] = "RangeSourceImpl";
-  readonly [destructorGuardSymbol]: UniffiGcObject;
-  readonly [pointerLiteralSymbol]: UniffiHandle;
-  private constructor();
-  length(asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<bigint>;
-  readAt(offset: bigint, length: number, asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<ArrayBuffer>;
-  uniffiDestroy(): void;
-  static instanceOf(obj_: any): obj_ is RangeSourceImpl;
-}
-/**
- * A soft-binding binder: how a recoverable binding is derived from an asset. Put these inside
- * the issuer's manifest mode to sign and index under them, and pass them in verify options to
- * recover. Implement it for an algorithm the SDK does not ship; the SDK's own are
- * [`IsccBinder`] and [`HeldBinder`].
- *
- * `derive` answers this binder's binding for `source`, or `None` when there is none.
- * `options.format` is how the asset's format is known. `None` and an error
- * mean different things: `None` is "no binding here", an error is "the question could not be
- * answered", so a binder that failed never reads as an unmarked asset.
- */
-export interface Binder {
-  derive(source: RangeSource, options: DeriveOptions, asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<SoftBinding | undefined>;
-}
-/**
- * A soft-binding binder: how a recoverable binding is derived from an asset. Put these inside
- * the issuer's manifest mode to sign and index under them, and pass them in verify options to
- * recover. Implement it for an algorithm the SDK does not ship; the SDK's own are
- * [`IsccBinder`] and [`HeldBinder`].
- *
- * `derive` answers this binder's binding for `source`, or `None` when there is none.
- * `options.format` is how the asset's format is known. `None` and an error
- * mean different things: `None` is "no binding here", an error is "the question could not be
- * answered", so a binder that failed never reads as an unmarked asset.
+ * Where one byBinding query's value comes from.
  */
-export declare class BinderImpl extends UniffiAbstractObject implements Binder {
-  readonly [uniffiTypeNameSymbol] = "BinderImpl";
-  readonly [destructorGuardSymbol]: UniffiGcObject;
-  readonly [pointerLiteralSymbol]: UniffiHandle;
-  private constructor();
-  derive(source: RangeSource, options: DeriveOptions, asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<SoftBinding | undefined>;
-  uniffiDestroy(): void;
-  static instanceOf(obj_: any): obj_ is BinderImpl;
-}
+export type SoftBindingSource = InstanceType<typeof SoftBindingSource['Builtin' | 'Held' | 'Custom']>;
 /**
- * What one [`AssetVerifier::verify`] may do to recover a manifest: the binders this client
- * derives for itself, decided into `matches/byBinding`, and one field per content operation,
- * absent when not to be called. It needs a configured repository and at least one query.
+ * What one [`AssetVerifier::verify`] may do to recover a manifest: the soft bindings this client
+ * looks up itself through `matches/byBinding`, and the content query, absent when not to be
+ * asked. It needs a configured repository and at least one query.
  */
 export type Recovery = {
   when: RecoveryTrigger;
-  binders: Array<Binder>;
-  byContent?: ByContent;
-  byReference?: ByReference;
+  softBindings: Array<SoftBindingSource>;
+  content?: Content;
+  /**
+   * The whole recovery's budget, every repository together, each request bounded by what
+   * remains. Absent, 10 minutes; at most 2147483647 ms.
+   */
+  timeout?: number;
 };
 /**
  * Generated factory for {@link Recovery} record objects.
  */
 export declare const Recovery: Readonly<{
-  create: (partial: Partial<Recovery> & Required<Omit<Recovery, "byContent" | "byReference">>) => Recovery;
-  new: (partial: Partial<Recovery> & Required<Omit<Recovery, "byContent" | "byReference">>) => Recovery;
+  create: (partial: Partial<Recovery> & Required<Omit<Recovery, "content" | "softBindings" | "timeout">>) => Recovery;
+  new: (partial: Partial<Recovery> & Required<Omit<Recovery, "content" | "softBindings" | "timeout">>) => Recovery;
   defaults: () => Partial<Recovery>;
 }>;
 /**
- * A byte range holding a bare C2PA manifest store, or reserved for one. A record of
- * primitives, so a plugin in its OWN UniFFI namespace declares a structurally identical
- * one and the two cross the boundary without sharing a Rust type.
- */
-export type Region = {
-  offset: bigint;
-  length: bigint;
-};
-/**
- * Generated factory for {@link Region} record objects.
- */
-export declare const Region: Readonly<{
-  create: (partial: Partial<Region> & Required<Omit<Region, never>>) => Region;
-  new: (partial: Partial<Region> & Required<Omit<Region, never>>) => Region;
-  defaults: () => Partial<Region>;
-}>;
-/**
- * Construction options for [`StreamVerifier::new`] (and the `StreamVerifier.create`
- * JS binding). Every field is stated: nothing here is chosen on the caller's behalf.
- *
- * `#[binding]` derives the wasm shape (`trustC2paAnchors` camelCase) and,
- * with `ffi`, a `uniffi::Record` for the native `StreamVerifier.create` binding, so there
- * is no per-lane DTO copy. Off both lanes it is a plain struct.
+ * What a stream verifier trusts, and how far a segment's clock may drift.
  */
 export type StreamVerifierOptions = {
+  trust: Trust;
   /**
-   * PEM trust anchors for the manifest signers the caller trusts.
+   * How far a segment's presentation time may sit outside its session key's validity period:
+   * the encoder clock's allowance. Absent, 5 minutes. Compared in whole seconds.
    */
-  trustAnchors: Array<string>;
-  /**
-   * PEM trust anchors for the time-stamping authorities the caller trusts.
-   */
-  tsaTrustAnchors: Array<string>;
-  /**
-   * Also trust the bundled official C2PA anchors, manifest and TSA lists, beside the
-   * caller's. `false` trusts the caller's lists alone.
-   */
-  trustC2paAnchors: boolean;
-  /**
-   * Issuer DIDs whose CAWG identity (ICA) credentials count as validated, matched
-   * exactly against the credential issuer. Empty trusts no issuer: an identity assertion
-   * on the init segment's manifest then reports `cawg.ica.untrusted_issuer` and withholds
-   * `cawg.ica.credential_valid`.
-   */
-  trustedIcaIssuers: Array<string>;
-  /**
-   * How far a segment's timestamp may sit from wall-clock before it is rejected as
-   * skewed, in seconds: the deployment's own encoder-clock allowance, stated rather than
-   * assumed.
-   */
-  segmentSkewToleranceSecs: bigint;
+  skewTolerance?: number;
 };
 /**
  * Generated factory for {@link StreamVerifierOptions} record objects.
  */
 export declare const StreamVerifierOptions: Readonly<{
-  create: (partial: Partial<StreamVerifierOptions> & Required<Omit<StreamVerifierOptions, never>>) => StreamVerifierOptions;
-  new: (partial: Partial<StreamVerifierOptions> & Required<Omit<StreamVerifierOptions, never>>) => StreamVerifierOptions;
+  create: (partial: Partial<StreamVerifierOptions> & Required<Omit<StreamVerifierOptions, "skewTolerance">>) => StreamVerifierOptions;
+  new: (partial: Partial<StreamVerifierOptions> & Required<Omit<StreamVerifierOptions, "skewTolerance">>) => StreamVerifierOptions;
   defaults: () => Partial<StreamVerifierOptions>;
 }>;
 export declare enum SegmentValidation_Tags {
@@ -4311,16 +4161,16 @@ export interface PluginReader {
   /**
    * Recognize the format from the real asset, or `None` to decline it.
    */
-  sniff(src: RangeSource, asyncOpts_?: {
+  sniff(source: RangeSource, asyncOpts_?: {
     signal: AbortSignal;
   }): Promise<string | undefined>;
   /**
    * The manifest window(s), or empty when none is present. MUST be byte-identical
    * regardless of slot contents (empty at sign, filled after embed, zeroed after strip).
    */
-  locate(src: RangeSource, asyncOpts_?: {
+  locate(source: RangeSource, asyncOpts_?: {
     signal: AbortSignal;
-  }): Promise<Array<Region>>;
+  }): Promise<Array<ByteRange>>;
 }
 /**
  * A C2PA asset verifier bound to a trust configuration. Construct once, verify many.
@@ -4336,9 +4186,9 @@ export interface AssetVerifierLike {
    *
    * # Errors
    *
-   * `READER_INVALID` when the source can't be read/parsed, or a repository failure
-   * involving the asset backend, repository, or a fetched manifest. Local binder faults,
-   * refused queries, and skipped oversized uploads are retained in the recovery summary.
+   * Recovery options that cannot run, `READER_INVALID` when the source can't be read or
+   * parsed, and the backend's fault when it fails mid-read. Everything a repository answers
+   * or fails to answer is in the recovery summary.
    */
   verify(source: RangeSource, recovery: Recovery | undefined, plugins: Array<PluginReader>, asyncOpts_?: {
     signal: AbortSignal;
@@ -4374,11 +4224,11 @@ export declare class AssetVerifier extends UniffiAbstractObject implements Asset
    *
    * # Errors
    *
-   * `READER_INVALID` when the source can't be read/parsed, or a repository failure
-   * involving the asset backend, repository, or a fetched manifest. Local binder faults,
-   * refused queries, and skipped oversized uploads are retained in the recovery summary.
+   * Recovery options that cannot run, `READER_INVALID` when the source can't be read or
+   * parsed, and the backend's fault when it fails mid-read. Everything a repository answers
+   * or fails to answer is in the recovery summary.
    */
-  verify(source: RangeSource, recovery: Recovery | undefined, plugins: Array<PluginReader>, asyncOpts_?: {
+  verify(source: RangeSource, recovery?: Recovery | undefined, plugins?: Array<PluginReader>, asyncOpts_?: {
     signal: AbortSignal;
   }): Promise<AssetVerification>;
   uniffiDestroy(): void;
@@ -4451,68 +4301,8 @@ export declare class FileSource extends UniffiAbstractObject implements FileSour
   static instanceOf(obj_: any): obj_ is FileSource;
 }
 /**
- * A binding you already hold, such as an out-of-band video ISCC. Reads nothing.
- */
-export interface HeldBinderLike {
-  derive(source: RangeSource, options: DeriveOptions, asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<SoftBinding | undefined>;
-}
-/**
- * @deprecated Use `HeldBinderLike` instead.
- */
-export type HeldBinderInterface = HeldBinderLike;
-/**
- * A binding you already hold, such as an out-of-band video ISCC. Reads nothing.
- */
-export declare class HeldBinder extends UniffiAbstractObject implements HeldBinderLike {
-  readonly [uniffiTypeNameSymbol] = "HeldBinder";
-  readonly [destructorGuardSymbol]: UniffiGcObject;
-  readonly [pointerLiteralSymbol]: UniffiHandle;
-  /**
-   * # Errors
-   *
-   * A binding with an empty algorithm or value.
-   */
-  constructor(binding: SoftBinding);
-  derive(source: RangeSource, options: DeriveOptions, asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<SoftBinding | undefined>;
-  uniffiDestroy(): void;
-  static instanceOf(obj_: any): obj_ is HeldBinder;
-}
-/**
- * Local ISCC Image-Code for supported image formats.
- */
-export interface IsccBinderLike {
-  derive(source: RangeSource, options: DeriveOptions, asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<SoftBinding | undefined>;
-}
-/**
- * @deprecated Use `IsccBinderLike` instead.
- */
-export type IsccBinderInterface = IsccBinderLike;
-/**
- * Local ISCC Image-Code for supported image formats.
- */
-export declare class IsccBinder extends UniffiAbstractObject implements IsccBinderLike {
-  readonly [uniffiTypeNameSymbol] = "IsccBinder";
-  readonly [destructorGuardSymbol]: UniffiGcObject;
-  readonly [pointerLiteralSymbol]: UniffiHandle;
-  constructor();
-  derive(source: RangeSource, options: DeriveOptions, asyncOpts_?: {
-    signal: AbortSignal;
-  }): Promise<SoftBinding | undefined>;
-  uniffiDestroy(): void;
-  static instanceOf(obj_: any): obj_ is IsccBinder;
-}
-/**
- * An in-memory [`RangeSource`], for a caller that already holds the whole asset as
- * bytes and doesn't want to write a custom source. A **native** implementation of a
- * `with_foreign` interface (`#[uniffi::export]` on the trait impl, not the foreign
- * callback path), so the generated binding is a plain constructible object and a Python
- * caller writes no subclass at all: `MemorySource(data)`.
+ * An in-memory [`RangeSource`] for a caller that already holds the whole asset as bytes:
+ * `MemorySource(data)`, no subclass.
  *
  * # Size ceiling
  *
@@ -4522,9 +4312,10 @@ export declare class IsccBinder extends UniffiAbstractObject implements IsccBind
  * [`RangeSource`] over a file handle for anything approaching that: the SDK only ever asks for
  * bounded ranges, so nothing else has to hold the asset.
  *
- * Construction copies the whole asset across the boundary, on the calling thread: about 5ms for
- * 10 MB, 315ms for 500 MB. That is the one part of a sign or verify the SDK cannot move off your
- * thread, and neither a ranged source nor [`FileSource`] pays it.
+ * Construction moves the whole asset across the boundary once, on the calling thread; the SDK
+ * then holds what arrived and answers every read as a window into it. That crossing is the one
+ * part of a sign or verify the SDK cannot move off your thread, and neither a ranged source nor
+ * [`FileSource`] pays it.
  */
 export interface MemorySourceLike {
   length(asyncOpts_?: {
@@ -4539,11 +4330,8 @@ export interface MemorySourceLike {
  */
 export type MemorySourceInterface = MemorySourceLike;
 /**
- * An in-memory [`RangeSource`], for a caller that already holds the whole asset as
- * bytes and doesn't want to write a custom source. A **native** implementation of a
- * `with_foreign` interface (`#[uniffi::export]` on the trait impl, not the foreign
- * callback path), so the generated binding is a plain constructible object and a Python
- * caller writes no subclass at all: `MemorySource(data)`.
+ * An in-memory [`RangeSource`] for a caller that already holds the whole asset as bytes:
+ * `MemorySource(data)`, no subclass.
  *
  * # Size ceiling
  *
@@ -4553,9 +4341,10 @@ export type MemorySourceInterface = MemorySourceLike;
  * [`RangeSource`] over a file handle for anything approaching that: the SDK only ever asks for
  * bounded ranges, so nothing else has to hold the asset.
  *
- * Construction copies the whole asset across the boundary, on the calling thread: about 5ms for
- * 10 MB, 315ms for 500 MB. That is the one part of a sign or verify the SDK cannot move off your
- * thread, and neither a ranged source nor [`FileSource`] pays it.
+ * Construction moves the whole asset across the boundary once, on the calling thread; the SDK
+ * then holds what arrived and answers every read as a window into it. That crossing is the one
+ * part of a sign or verify the SDK cannot move off your thread, and neither a ranged source nor
+ * [`FileSource`] pays it.
  */
 export declare class MemorySource extends UniffiAbstractObject implements MemorySourceLike {
   readonly [uniffiTypeNameSymbol] = "MemorySource";
@@ -4582,8 +4371,8 @@ export declare class MemorySource extends UniffiAbstractObject implements Memory
  */
 export interface StreamSessionLike {
   /**
-   * Everything this stream's init segments have registered, as CBOR for another node to
-   * [`resume`](StreamVerifier::resume) from.
+   * This stream's id and everything its init segments have registered, as CBOR for another
+   * node to [`resume`](StreamVerifier::resume) from.
    *
    * The one piece of stream state that leaves the SDK, and only because a clustered
    * verifier needs it: the init URL is overwritten on rotation, so a node joining during
@@ -4605,7 +4394,7 @@ export interface StreamSessionLike {
    * manifest, or when a media segment arrives before any init was processed for the
    * stream.
    */
-  validate(data: RangeSource, asyncOpts_?: {
+  validate(source: RangeSource, asyncOpts_?: {
     signal: AbortSignal;
   }): Promise<SegmentValidation>;
 }
@@ -4623,8 +4412,8 @@ export declare class StreamSession extends UniffiAbstractObject implements Strea
   readonly [pointerLiteralSymbol]: UniffiHandle;
   private constructor();
   /**
-   * Everything this stream's init segments have registered, as CBOR for another node to
-   * [`resume`](StreamVerifier::resume) from.
+   * This stream's id and everything its init segments have registered, as CBOR for another
+   * node to [`resume`](StreamVerifier::resume) from.
    *
    * The one piece of stream state that leaves the SDK, and only because a clustered
    * verifier needs it: the init URL is overwritten on rotation, so a node joining during
@@ -4646,44 +4435,44 @@ export declare class StreamSession extends UniffiAbstractObject implements Strea
    * manifest, or when a media segment arrives before any init was processed for the
    * stream.
    */
-  validate(data: RangeSource, asyncOpts_?: {
+  validate(source: RangeSource, asyncOpts_?: {
     signal: AbortSignal;
   }): Promise<SegmentValidation>;
   uniffiDestroy(): void;
   static instanceOf(obj_: any): obj_ is StreamSession;
 }
 /**
- * A live-stream verifier bound to a trust configuration. Construct once with
+ * A stream verifier bound to a trust configuration. Construct once with
  * [`create`](Self::create), then [`open`](Self::open) a stream to feed segments to.
  */
 export interface StreamVerifierLike {
   /**
-   * Open `stream_id` for validation, handing back a [`StreamSession`] to feed
-   * segments to.
+   * Open the stream `id` for validation, handing back a [`StreamSession`] to feed segments
+   * to.
    *
    * No I/O: the handle carries the id so it cannot be mistyped or confused with another
    * stream's, and classification still happens per segment. Opening one id twice hands
    * back the same live session, so a caller that reconnects keeps the state its earlier
    * handle accumulated.
    */
-  open(streamId: string): StreamSessionLike;
+  open(id: string): StreamSessionLike;
   /**
-   * Open `stream_id` on the state another node exported, merged into whatever this one
-   * holds for that id already.
+   * Open the stream another node exported, its state merged into whatever this one holds
+   * for that stream already.
    *
    * # Errors
    *
-   * `STREAM_INVALID` when `state` is not a value [`StreamSession::export`] produced,
-   * or carries a version this SDK no longer reads.
+   * A field violation at `state` when it is not a value [`StreamSession::export`]
+   * produced (`state.malformed`), or one of another export version (`state.version`).
    */
-  resume(streamId: string, state: ArrayBuffer): StreamSessionLike;
+  resume(state: ArrayBuffer): StreamSessionLike;
 }
 /**
  * @deprecated Use `StreamVerifierLike` instead.
  */
 export type StreamVerifierInterface = StreamVerifierLike;
 /**
- * A live-stream verifier bound to a trust configuration. Construct once with
+ * A stream verifier bound to a trust configuration. Construct once with
  * [`create`](Self::create), then [`open`](Self::open) a stream to feed segments to.
  */
 export declare class StreamVerifier extends UniffiAbstractObject implements StreamVerifierLike {
@@ -4700,25 +4489,25 @@ export declare class StreamVerifier extends UniffiAbstractObject implements Stre
    */
   static create(options: StreamVerifierOptions): StreamVerifierLike;
   /**
-   * Open `stream_id` for validation, handing back a [`StreamSession`] to feed
-   * segments to.
+   * Open the stream `id` for validation, handing back a [`StreamSession`] to feed segments
+   * to.
    *
    * No I/O: the handle carries the id so it cannot be mistyped or confused with another
    * stream's, and classification still happens per segment. Opening one id twice hands
    * back the same live session, so a caller that reconnects keeps the state its earlier
    * handle accumulated.
    */
-  open(streamId: string): StreamSessionLike;
+  open(id: string): StreamSessionLike;
   /**
-   * Open `stream_id` on the state another node exported, merged into whatever this one
-   * holds for that id already.
+   * Open the stream another node exported, its state merged into whatever this one holds
+   * for that stream already.
    *
    * # Errors
    *
-   * `STREAM_INVALID` when `state` is not a value [`StreamSession::export`] produced,
-   * or carries a version this SDK no longer reads.
+   * A field violation at `state` when it is not a value [`StreamSession::export`]
+   * produced (`state.malformed`), or one of another export version (`state.version`).
    */
-  resume(streamId: string, state: ArrayBuffer): StreamSessionLike;
+  resume(state: ArrayBuffer): StreamSessionLike;
   uniffiDestroy(): void;
   static instanceOf(obj_: any): obj_ is StreamVerifier;
 }
@@ -4750,13 +4539,6 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): AssertionMetadata;
       lower(value: AssertionMetadata, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeAssetFormat: {
-      readFromCursor(c: Cursor): AssetFormat;
-      writeIntoCursor(value: AssetFormat, c: Cursor): void;
-      allocationSize(value: AssetFormat): number;
-      lift(value: UniffiByteArray): AssetFormat;
-      lower(value: AssetFormat, alloc: RustBufferAllocator): UniffiByteArray;
-    };
     FfiConverterTypeAssetType: {
       readFromCursor(c: Cursor): AssetType;
       writeIntoCursor(value: AssetType, c: Cursor): void;
@@ -4779,20 +4561,19 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): AssetVerifierOptions;
       lower(value: AssetVerifierOptions, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeBinder: FfiConverterObjectWithCallbacks<Binder>;
-    FfiConverterTypeByContent: {
-      readFromCursor(c: Cursor): ByContent;
-      writeIntoCursor(value: ByContent, c: Cursor): void;
-      allocationSize(value: ByContent): number;
-      lift(value: UniffiByteArray): ByContent;
-      lower(value: ByContent, alloc: RustBufferAllocator): UniffiByteArray;
-    };
-    FfiConverterTypeByReference: {
-      readFromCursor(c: Cursor): ByReference;
-      writeIntoCursor(value: ByReference, c: Cursor): void;
-      allocationSize(value: ByReference): number;
-      lift(value: UniffiByteArray): ByReference;
-      lower(value: ByReference, alloc: RustBufferAllocator): UniffiByteArray;
+    FfiConverterTypeBlock: {
+      readFromCursor(c: Cursor): Block;
+      writeIntoCursor(value: Block, c: Cursor): void;
+      allocationSize(value: Block): number;
+      lift(value: UniffiByteArray): Block;
+      lower(value: Block, alloc: RustBufferAllocator): UniffiByteArray;
+    };
+    FfiConverterTypeByteRange: {
+      readFromCursor(c: Cursor): ByteRange;
+      writeIntoCursor(value: ByteRange, c: Cursor): void;
+      allocationSize(value: ByteRange): number;
+      lift(value: UniffiByteArray): ByteRange;
+      lower(value: ByteRange, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeClaimGeneratorInfo: {
       readFromCursor(c: Cursor): ClaimGeneratorInfo;
@@ -4808,19 +4589,27 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): Code;
       lower(value: Code, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeContentBindingClass: {
-      readFromCursor(c: Cursor): ContentBindingClass;
-      writeIntoCursor(value: ContentBindingClass, c: Cursor): void;
-      allocationSize(value: ContentBindingClass): number;
-      lift(value: UniffiByteArray): ContentBindingClass;
-      lower(value: ContentBindingClass, alloc: RustBufferAllocator): UniffiByteArray;
-    };
-    FfiConverterTypeContentTrigger: {
-      readFromCursor(c: Cursor): ContentTrigger;
-      writeIntoCursor(value: ContentTrigger, c: Cursor): void;
-      allocationSize(value: ContentTrigger): number;
-      lift(value: UniffiByteArray): ContentTrigger;
-      lower(value: ContentTrigger, alloc: RustBufferAllocator): UniffiByteArray;
+    FfiConverterTypeCompute: FfiConverterObjectWithCallbacks<Compute>;
+    FfiConverterTypeComputeRequest: {
+      readFromCursor(c: Cursor): ComputeRequest;
+      writeIntoCursor(value: ComputeRequest, c: Cursor): void;
+      allocationSize(value: ComputeRequest): number;
+      lift(value: UniffiByteArray): ComputeRequest;
+      lower(value: ComputeRequest, alloc: RustBufferAllocator): UniffiByteArray;
+    };
+    FfiConverterTypeContent: {
+      readFromCursor(c: Cursor): Content;
+      writeIntoCursor(value: Content, c: Cursor): void;
+      allocationSize(value: Content): number;
+      lift(value: UniffiByteArray): Content;
+      lower(value: Content, alloc: RustBufferAllocator): UniffiByteArray;
+    };
+    FfiConverterTypeContentWhen: {
+      readFromCursor(c: Cursor): ContentWhen;
+      writeIntoCursor(value: ContentWhen, c: Cursor): void;
+      allocationSize(value: ContentWhen): number;
+      lift(value: UniffiByteArray): ContentWhen;
+      lower(value: ContentWhen, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeCoordinate: {
       readFromCursor(c: Cursor): Coordinate;
@@ -4829,13 +4618,7 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): Coordinate;
       lower(value: Coordinate, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeCredential: {
-      readFromCursor(c: Cursor): Credential;
-      writeIntoCursor(value: Credential, c: Cursor): void;
-      allocationSize(value: Credential): number;
-      lift(value: UniffiByteArray): Credential;
-      lower(value: Credential, alloc: RustBufferAllocator): UniffiByteArray;
-    };
+    FfiConverterTypeCredential: FfiConverterObject<CredentialLike>;
     FfiConverterTypeCredentialOrigin: {
       readFromCursor(c: Cursor): CredentialOrigin;
       writeIntoCursor(value: CredentialOrigin, c: Cursor): void;
@@ -4850,12 +4633,19 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): DataSource;
       lower(value: DataSource, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeDeriveOptions: {
-      readFromCursor(c: Cursor): DeriveOptions;
-      writeIntoCursor(value: DeriveOptions, c: Cursor): void;
-      allocationSize(value: DeriveOptions): number;
-      lift(value: UniffiByteArray): DeriveOptions;
-      lower(value: DeriveOptions, alloc: RustBufferAllocator): UniffiByteArray;
+    FfiConverterTypeDiscovery: {
+      readFromCursor(c: Cursor): Discovery;
+      writeIntoCursor(value: Discovery, c: Cursor): void;
+      allocationSize(value: Discovery): number;
+      lift(value: UniffiByteArray): Discovery;
+      lower(value: Discovery, alloc: RustBufferAllocator): UniffiByteArray;
+    };
+    FfiConverterTypeDiscoveryVia: {
+      readFromCursor(c: Cursor): DiscoveryVia;
+      writeIntoCursor(value: DiscoveryVia, c: Cursor): void;
+      allocationSize(value: DiscoveryVia): number;
+      lift(value: UniffiByteArray): DiscoveryVia;
+      lower(value: DiscoveryVia, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeEndInclusivity: {
       readFromCursor(c: Cursor): EndInclusivity;
@@ -4886,12 +4676,12 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): Frame;
       lower(value: Frame, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeGoldenComparison: {
-      readFromCursor(c: Cursor): GoldenComparison;
-      writeIntoCursor(value: GoldenComparison, c: Cursor): void;
-      allocationSize(value: GoldenComparison): number;
-      lift(value: UniffiByteArray): GoldenComparison;
-      lower(value: GoldenComparison, alloc: RustBufferAllocator): UniffiByteArray;
+    FfiConverterTypeGolden: {
+      readFromCursor(c: Cursor): Golden;
+      writeIntoCursor(value: Golden, c: Cursor): void;
+      allocationSize(value: Golden): number;
+      lift(value: UniffiByteArray): Golden;
+      lower(value: Golden, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeHardBinding: {
       readFromCursor(c: Cursor): HardBinding;
@@ -4907,7 +4697,13 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): HashedUri;
       lower(value: HashedUri, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeHeldBinder: FfiConverterObject<HeldBinderLike>;
+    FfiConverterTypeHint: {
+      readFromCursor(c: Cursor): Hint;
+      writeIntoCursor(value: Hint, c: Cursor): void;
+      allocationSize(value: Hint): number;
+      lift(value: UniffiByteArray): Hint;
+      lower(value: Hint, alloc: RustBufferAllocator): UniffiByteArray;
+    };
     FfiConverterTypeIngredient: {
       readFromCursor(c: Cursor): Ingredient;
       writeIntoCursor(value: Ingredient, c: Cursor): void;
@@ -4929,7 +4725,6 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): InitValidation;
       lower(value: InitValidation, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeIsccBinder: FfiConverterObject<IsccBinderLike>;
     FfiConverterTypeItem: {
       readFromCursor(c: Cursor): Item;
       writeIntoCursor(value: Item, c: Cursor): void;
@@ -5003,13 +4798,6 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): Recovery;
       lower(value: Recovery, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeRecoveryDiscovery: {
-      readFromCursor(c: Cursor): RecoveryDiscovery;
-      writeIntoCursor(value: RecoveryDiscovery, c: Cursor): void;
-      allocationSize(value: RecoveryDiscovery): number;
-      lift(value: UniffiByteArray): RecoveryDiscovery;
-      lower(value: RecoveryDiscovery, alloc: RustBufferAllocator): UniffiByteArray;
-    };
     FfiConverterTypeRecoveryIssue: {
       readFromCursor(c: Cursor): RecoveryIssue;
       writeIntoCursor(value: RecoveryIssue, c: Cursor): void;
@@ -5038,12 +4826,12 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): RecoveryTrigger;
       lower(value: RecoveryTrigger, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeRegion: {
-      readFromCursor(c: Cursor): Region;
-      writeIntoCursor(value: Region, c: Cursor): void;
-      allocationSize(value: Region): number;
-      lift(value: UniffiByteArray): Region;
-      lower(value: Region, alloc: RustBufferAllocator): UniffiByteArray;
+    FfiConverterTypeReference: {
+      readFromCursor(c: Cursor): Reference;
+      writeIntoCursor(value: Reference, c: Cursor): void;
+      allocationSize(value: Reference): number;
+      lift(value: UniffiByteArray): Reference;
+      lower(value: Reference, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeRegionOfInterest: {
       readFromCursor(c: Cursor): RegionOfInterest;
@@ -5087,6 +4875,13 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): Role;
       lower(value: Role, alloc: RustBufferAllocator): UniffiByteArray;
     };
+    FfiConverterTypeScope: {
+      readFromCursor(c: Cursor): Scope;
+      writeIntoCursor(value: Scope, c: Cursor): void;
+      allocationSize(value: Scope): number;
+      lift(value: UniffiByteArray): Scope;
+      lower(value: Scope, alloc: RustBufferAllocator): UniffiByteArray;
+    };
     FfiConverterTypeSdkError: {
       readFromCursor(c: Cursor): SdkError;
       writeIntoCursor(value: SdkError, c: Cursor): void;
@@ -5108,12 +4903,12 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): SegmentValidation;
       lower(value: SegmentValidation, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeSessionKeySummary: {
-      readFromCursor(c: Cursor): SessionKeySummary;
-      writeIntoCursor(value: SessionKeySummary, c: Cursor): void;
-      allocationSize(value: SessionKeySummary): number;
-      lift(value: UniffiByteArray): SessionKeySummary;
-      lower(value: SessionKeySummary, alloc: RustBufferAllocator): UniffiByteArray;
+    FfiConverterTypeSessionKey: {
+      readFromCursor(c: Cursor): SessionKey;
+      writeIntoCursor(value: SessionKey, c: Cursor): void;
+      allocationSize(value: SessionKey): number;
+      lift(value: UniffiByteArray): SessionKey;
+      lower(value: SessionKey, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeShape: {
       readFromCursor(c: Cursor): Shape;
@@ -5144,12 +4939,19 @@ declare const _default$1: Readonly<{
       lower(value: SigningAlgSchema, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeSimilarityScore: FfiConverter<number, number>;
-    FfiConverterTypeSoftBinding: {
-      readFromCursor(c: Cursor): SoftBinding;
-      writeIntoCursor(value: SoftBinding, c: Cursor): void;
-      allocationSize(value: SoftBinding): number;
-      lift(value: UniffiByteArray): SoftBinding;
-      lower(value: SoftBinding, alloc: RustBufferAllocator): UniffiByteArray;
+    FfiConverterTypeSoftBindingSource: {
+      readFromCursor(c: Cursor): SoftBindingSource;
+      writeIntoCursor(value: SoftBindingSource, c: Cursor): void;
+      allocationSize(value: SoftBindingSource): number;
+      lift(value: UniffiByteArray): SoftBindingSource;
+      lower(value: SoftBindingSource, alloc: RustBufferAllocator): UniffiByteArray;
+    };
+    FfiConverterTypeSoftBindingType: {
+      readFromCursor(c: Cursor): SoftBindingType;
+      writeIntoCursor(value: SoftBindingType, c: Cursor): void;
+      allocationSize(value: SoftBindingType): number;
+      lift(value: UniffiByteArray): SoftBindingType;
+      lower(value: SoftBindingType, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeStatusCodes: {
       readFromCursor(c: Cursor): StatusCodes;
@@ -5202,6 +5004,20 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): TimeType;
       lower(value: TimeType, alloc: RustBufferAllocator): UniffiByteArray;
     };
+    FfiConverterTypeTimespan: {
+      readFromCursor(c: Cursor): Timespan;
+      writeIntoCursor(value: Timespan, c: Cursor): void;
+      allocationSize(value: Timespan): number;
+      lift(value: UniffiByteArray): Timespan;
+      lower(value: Timespan, alloc: RustBufferAllocator): UniffiByteArray;
+    };
+    FfiConverterTypeTrust: {
+      readFromCursor(c: Cursor): Trust;
+      writeIntoCursor(value: Trust, c: Cursor): void;
+      allocationSize(value: Trust): number;
+      lift(value: UniffiByteArray): Trust;
+      lower(value: Trust, alloc: RustBufferAllocator): UniffiByteArray;
+    };
     FfiConverterTypeUnitType: {
       readFromCursor(c: Cursor): UnitType;
       writeIntoCursor(value: UnitType, c: Cursor): void;