@trylimbo/sdk-verifier 0.3.0-canary.45 → 0.3.0-canary.50

package/gen/ffi/index.d.ts

@@ -181,7 +181,7 @@ declare const pointerLiteralSymbol: unique symbol;
  */
 declare const uniffiTypeNameSymbol: unique symbol;
 declare namespace trylimbo_verifier_d_exports {
-  export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierInterface, AssetVerifierLike, AssetVerifierOptions, Block, ByteRange, ClaimGeneratorInfo, Code, Compute, ComputeImpl, ComputeRequest, Content, ContentWhen, Coordinate, Credential, CredentialInterface, CredentialLike, CredentialOrigin, CredentialOrigin_Tags, DataSource, Discovery, DiscoveryVia, DiscoveryVia_Tags, EndInclusivity, FieldViolation, FileSource, FileSourceInterface, FileSourceLike, FingerprintCheck, FingerprintCheck_Tags, Frame, Golden, Golden_Tags, HardBinding, HashedUri, Hint, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, JsonValue, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, MemorySourceInterface, MemorySourceLike, PluginReader, Range, RangeSource, RangeSourceImpl, RangeType, Recovery, RecoveryIssue, RecoveryIssue_Tags, RecoveryStatus, RecoverySummary, RecoveryTrigger, Reference, Region, RegionCoordinate, RegionForm, RegionForm_Tags, RegionOfInterest, RegionRange, RegionRange_Tags, RegionShape, RegionTextSelector, RegionTextSelectorRange, RegionUnit, Relationship, Repository, Repository_Tags, ResourceRef, ReviewRating, Scope, Scope_Tags, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKey, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SimilarityScore, SoftBindingSource, SoftBindingSource_Tags, SoftBindingType, StatusCodes, StreamSession, StreamSessionInterface, StreamSessionLike, StreamVerifier, StreamVerifierInterface, StreamVerifierLike, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, Trust, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Verdict, VerdictRule, Verdict_Tags, c2paTrustList, c2paTsaTrustList, computeSoftBinding, _default$1 as default, devCa, parse, resource, tamperCodes };
+  export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierInterface, AssetVerifierLike, AssetVerifierOptions, Block, ByteRange, ClaimGeneratorInfo, Code, Compute, ComputeImpl, ComputeRequest, Content, ContentWhen, Coordinate, Credential, CredentialInterface, CredentialLike, CredentialRef, CredentialRef_Tags, DataSource, Discovery, DiscoveryVia, DiscoveryVia_Tags, EndInclusivity, FieldViolation, FileSource, FileSourceInterface, FileSourceLike, FingerprintCheck, FingerprintCheck_Tags, Frame, HardBinding, HashedUri, Hint, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, JsonValue, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestComparison, ManifestStore, MediaValidation, MemorySource, MemorySourceInterface, MemorySourceLike, PluginReader, Range, RangeSource, RangeSourceImpl, RangeType, Recovered, RecoveredCredential, Recovered_Tags, Recovery, RecoveryIssue, RecoveryIssue_Tags, RecoveryTrigger, Reference, Region, RegionCoordinate, RegionForm, RegionForm_Tags, RegionOfInterest, RegionRange, RegionRange_Tags, RegionShape, RegionTextSelector, RegionTextSelectorRange, RegionUnit, Relationship, Repository, Repository_Tags, ResourceRef, ReviewRating, Scope, Scope_Tags, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKey, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SimilarityScore, SoftBindingSource, SoftBindingSource_Tags, SoftBindingType, StatusCodes, StreamSession, StreamSessionInterface, StreamSessionLike, StreamVerifier, StreamVerifierInterface, StreamVerifierLike, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, Trust, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Verdict, VerdictRule, Verdict_Tags, c2paTrustList, c2paTsaTrustList, computeSoftBinding, _default$1 as default, devCa, parse, resource, tamperCodes };
 }
 /**
  * The bundled C2PA Conformance Program signing-CA trust list (a release snapshot). Trusted by
@@ -1417,461 +1417,6 @@ export declare const ManifestStore: Readonly<{
   new: (partial: Partial<ManifestStore> & Required<Omit<ManifestStore, "activeManifest" | "validationResults" | "validationState" | "validationStatus">>) => ManifestStore;
   defaults: () => Partial<ManifestStore>;
 }>;
-/**
- * The value a content query was hinted with, under its own algorithm.
- */
-export type Hint = {
-  alg: string;
-  value: ArrayBuffer;
-};
-/**
- * Generated factory for {@link Hint} record objects.
- */
-export declare const Hint: Readonly<{
-  create: (partial: Partial<Hint> & Required<Omit<Hint, never>>) => Hint;
-  new: (partial: Partial<Hint> & Required<Omit<Hint, never>>) => Hint;
-  defaults: () => Partial<Hint>;
-}>;
-export declare enum DiscoveryVia_Tags {
-  ByBinding = "ByBinding",
-  ByContent = "ByContent",
-  ByReference = "ByReference"
-}
-/**
- * The Soft Binding Resolution API route a discovery came through.
- */
-export declare const DiscoveryVia: Readonly<{
-  instanceOf: (obj: any) => obj is DiscoveryVia;
-  ByBinding: {
-    new (inner: {
-      value: ArrayBuffer;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByBinding;
-      readonly inner: Readonly<{
-        value: ArrayBuffer;
-      }>;
-    };
-    "new"(inner: {
-      value: ArrayBuffer;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByBinding;
-      readonly inner: Readonly<{
-        value: ArrayBuffer;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByBinding;
-      readonly inner: Readonly<{
-        value: ArrayBuffer;
-      }>;
-    };
-  };
-  ByContent: {
-    new (inner: {
-      hint?: Hint;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByContent;
-      readonly inner: Readonly<{
-        hint?: Hint;
-      }>;
-    };
-    "new"(inner: {
-      hint?: Hint;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByContent;
-      readonly inner: Readonly<{
-        hint?: Hint;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByContent;
-      readonly inner: Readonly<{
-        hint?: Hint;
-      }>;
-    };
-  };
-  ByReference: {
-    new (inner: {
-      hint?: Hint;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByReference;
-      readonly inner: Readonly<{
-        hint?: Hint;
-      }>;
-    };
-    "new"(inner: {
-      hint?: Hint;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByReference;
-      readonly inner: Readonly<{
-        hint?: Hint;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
-      readonly tag: DiscoveryVia_Tags.ByReference;
-      readonly inner: Readonly<{
-        hint?: Hint;
-      }>;
-    };
-  };
-}>;
-/**
- * The Soft Binding Resolution API route a discovery came through.
- */
-export type DiscoveryVia = InstanceType<typeof DiscoveryVia['ByBinding' | 'ByContent' | 'ByReference']>;
-/**
- * The C2PA list's `type` of a soft binding algorithm.
- */
-export declare enum SoftBindingType {
-  Fingerprint = 0,
-  Watermark = 1
-}
-/**
- * Typealias from the type name used in the UDL file to the builtin type.  This
- * is needed because the UDL type name is used in function/method signatures.
- */
-export type SimilarityScore = number;
-/**
- * One query that located a recovered credential: how it was asked, under which algorithm, and
- * where the manifest came from.
- */
-export type Discovery = {
-  via: DiscoveryVia;
-  alg: string;
-  type: SoftBindingType;
-  /**
-   * The repository's `similarityScore`, 0-100.
-   */
-  score?: SimilarityScore;
-  repository: string;
-  endpoint?: string;
-};
-/**
- * Generated factory for {@link Discovery} record objects.
- */
-export declare const Discovery: Readonly<{
-  create: (partial: Partial<Discovery> & Required<Omit<Discovery, "endpoint" | "score">>) => Discovery;
-  new: (partial: Partial<Discovery> & Required<Omit<Discovery, "endpoint" | "score">>) => Discovery;
-  defaults: () => Partial<Discovery>;
-}>;
-export declare enum FingerprintCheck_Tags {
-  NotNeeded = "NotNeeded",
-  Missing = "Missing",
-  Unsupported = "Unsupported",
-  Indeterminate = "Indeterminate",
-  Compared = "Compared"
-}
-/**
- * Whether the asset's own fingerprint backs up a manifest that a watermark led to.
- *
- * C2PA 2.4 Soft Binding API section 1.2.2.3: a watermark can be lifted from one asset onto another, so a mark alone does
- * not establish that the manifest it resolves to describes THIS asset. The mitigation the spec
- * gives is to compare a fingerprint computed from the asset against the one the recovered
- * manifest records, and `watermark-and-fingerprint` ends on exactly that comparison.
- *
- * Reported rather than enforced: a transcode legitimately shifts a fingerprint, so where the line
- * falls is the relying party's policy, not this SDK's. What the SDK owes them is the measurement.
- */
-export declare const FingerprintCheck: Readonly<{
-  instanceOf: (obj: any) => obj is FingerprintCheck;
-  NotNeeded: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NotNeeded;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NotNeeded;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.NotNeeded;
-    };
-  };
-  Missing: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Missing;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Missing;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Missing;
-    };
-  };
-  Unsupported: {
-    new (inner: {
-      alg: string;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Unsupported;
-      readonly inner: Readonly<{
-        alg: string;
-      }>;
-    };
-    "new"(inner: {
-      alg: string;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Unsupported;
-      readonly inner: Readonly<{
-        alg: string;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Unsupported;
-      readonly inner: Readonly<{
-        alg: string;
-      }>;
-    };
-  };
-  Indeterminate: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Indeterminate;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Indeterminate;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Indeterminate;
-    };
-  };
-  Compared: {
-    new (inner: {
-      score: SimilarityScore;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Compared;
-      readonly inner: Readonly<{
-        score: SimilarityScore;
-      }>;
-    };
-    "new"(inner: {
-      score: SimilarityScore;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Compared;
-      readonly inner: Readonly<{
-        score: SimilarityScore;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
-      readonly tag: FingerprintCheck_Tags.Compared;
-      readonly inner: Readonly<{
-        score: SimilarityScore;
-      }>;
-    };
-  };
-}>;
-/**
- * Whether the asset's own fingerprint backs up a manifest that a watermark led to.
- *
- * C2PA 2.4 Soft Binding API section 1.2.2.3: a watermark can be lifted from one asset onto another, so a mark alone does
- * not establish that the manifest it resolves to describes THIS asset. The mitigation the spec
- * gives is to compare a fingerprint computed from the asset against the one the recovered
- * manifest records, and `watermark-and-fingerprint` ends on exactly that comparison.
- *
- * Reported rather than enforced: a transcode legitimately shifts a fingerprint, so where the line
- * falls is the relying party's policy, not this SDK's. What the SDK owes them is the measurement.
- */
-export type FingerprintCheck = InstanceType<typeof FingerprintCheck['NotNeeded' | 'Missing' | 'Unsupported' | 'Indeterminate' | 'Compared']>;
-export declare enum CredentialOrigin_Tags {
-  Embedded = "Embedded",
-  Recovered = "Recovered"
-}
-/**
- * Where a credential came from: embedded in the asset, or recovered from a repository.
- */
-export declare const CredentialOrigin: Readonly<{
-  instanceOf: (obj: any) => obj is CredentialOrigin;
-  Embedded: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Embedded;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Embedded;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Embedded;
-    };
-  };
-  Recovered: {
-    new (inner: {
-      discoveries: Array<Discovery>;
-      fingerprintCheck: FingerprintCheck;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Recovered;
-      readonly inner: Readonly<{
-        discoveries: Array<Discovery>;
-        fingerprintCheck: FingerprintCheck;
-      }>;
-    };
-    "new"(inner: {
-      discoveries: Array<Discovery>;
-      fingerprintCheck: FingerprintCheck;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Recovered;
-      readonly inner: Readonly<{
-        discoveries: Array<Discovery>;
-        fingerprintCheck: FingerprintCheck;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "CredentialOrigin";
-      readonly tag: CredentialOrigin_Tags.Recovered;
-      readonly inner: Readonly<{
-        discoveries: Array<Discovery>;
-        fingerprintCheck: FingerprintCheck;
-      }>;
-    };
-  };
-}>;
-/**
- * Where a credential came from: embedded in the asset, or recovered from a repository.
- */
-export type CredentialOrigin = InstanceType<typeof CredentialOrigin['Embedded' | 'Recovered']>;
 /**
  * A canonical gRPC/Connect status code: the coarse, closed failure class.
  */
@@ -2254,9 +1799,8 @@ export declare const SdkError: Readonly<{
  */
 export type SdkError = InstanceType<typeof SdkError['Reason' | 'Invalid' | 'Status']>;
 /**
- * One `verify` result: the c2pa manifest store, where it came from, and whether its hard
- * binding holds over the bytes read. A handle: it keeps the store, so a thumbnail is read from it
- * with `resource` and never travels with the report.
+ * A manifest store this verify found: a handle that keeps the store, so a thumbnail is read from
+ * it with `resource` and never travels with the report.
  */
 export interface CredentialLike {
   /**
@@ -2273,9 +1817,14 @@ export interface CredentialLike {
    */
   manifest(): ManifestStore;
   /**
-   * Where this credential came from.
+   * c2pa's own serialization of [`Self::manifest`], the object the wasm lane hands JS, for a
+   * host that forwards the store rather than reads it.
+   *
+   * # Errors
+   *
+   * `READER_INVALID` when c2pa cannot serialize the store.
    */
-  origin(): CredentialOrigin;
+  manifestJson(): JsonValue;
   /**
    * The bytes of one resource the store holds, or nothing: a thumbnail is read with the
    * `identifier` of the resource reference in `manifest`, and rendered with the `format` beside
@@ -2289,15 +1838,19 @@ export interface CredentialLike {
   resource(uri: string, asyncOpts_?: {
     signal: AbortSignal;
   }): Promise<ArrayBuffer | undefined>;
+  /**
+   * Whether it stands over these bytes: its hard binding holds and its validation is not
+   * `Invalid`.
+   */
+  stands(): boolean;
 }
 /**
  * @deprecated Use `CredentialLike` instead.
  */
 export type CredentialInterface = CredentialLike;
 /**
- * One `verify` result: the c2pa manifest store, where it came from, and whether its hard
- * binding holds over the bytes read. A handle: it keeps the store, so a thumbnail is read from it
- * with `resource` and never travels with the report.
+ * A manifest store this verify found: a handle that keeps the store, so a thumbnail is read from
+ * it with `resource` and never travels with the report.
  */
 export declare class Credential extends UniffiAbstractObject implements CredentialLike {
   readonly [uniffiTypeNameSymbol] = "Credential";
@@ -2318,9 +1871,14 @@ export declare class Credential extends UniffiAbstractObject implements Credenti
    */
   manifest(): ManifestStore;
   /**
-   * Where this credential came from.
+   * c2pa's own serialization of [`Self::manifest`], the object the wasm lane hands JS, for a
+   * host that forwards the store rather than reads it.
+   *
+   * # Errors
+   *
+   * `READER_INVALID` when c2pa cannot serialize the store.
    */
-  origin(): CredentialOrigin;
+  manifestJson(): JsonValue;
   /**
    * The bytes of one resource the store holds, or nothing: a thumbnail is read with the
    * `identifier` of the resource reference in `manifest`, and rendered with the `format` beside
@@ -2334,20 +1892,13 @@ export declare class Credential extends UniffiAbstractObject implements Credenti
   resource(uri: string, asyncOpts_?: {
     signal: AbortSignal;
   }): Promise<ArrayBuffer | undefined>;
-  uniffiDestroy(): void;
-  static instanceOf(obj_: any): obj_ is Credential;
-}
-/**
- * Whether the configured recovery sequence ran to a conclusive answer.
- */
-export declare enum RecoveryStatus {
-  NotRequested = 0,
-  NotFound = 1,
-  Recovered = 2,
   /**
-   * No credential was recovered and at least one required attempt failed or was skipped.
+   * Whether it stands over these bytes: its hard binding holds and its validation is not
+   * `Invalid`.
    */
-  Incomplete = 3
+  stands(): boolean;
+  uniffiDestroy(): void;
+  static instanceOf(obj_: any): obj_ is Credential;
 }
 export declare enum RecoveryIssue_Tags {
   ComputeFailed = "ComputeFailed",
@@ -2370,7 +1921,198 @@ export declare const RecoveryIssue: Readonly<{
   instanceOf: (obj: any) => obj is RecoveryIssue;
   ComputeFailed: {
     new (inner: {
-      alg: string;
+      alg: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ComputeFailed;
+      readonly inner: Readonly<{
+        alg: string;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      alg: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ComputeFailed;
+      readonly inner: Readonly<{
+        alg: string;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ComputeFailed;
+      readonly inner: Readonly<{
+        alg: string;
+        message: string;
+      }>;
+    };
+  };
+  BindingFailed: {
+    new (inner: {
+      repository: string;
+      alg: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.BindingFailed;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      repository: string;
+      alg: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.BindingFailed;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.BindingFailed;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+  };
+  QueryRefused: {
+    new (inner: {
+      repository: string;
+      alg: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      repository: string;
+      alg: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+  };
+  ContentFailed: {
+    new (inner: {
+      repository: string;
+      alg: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentFailed;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      repository: string;
+      alg: string;
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentFailed;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.ContentFailed;
+      readonly inner: Readonly<{
+        repository: string;
+        alg: string;
+        message: string;
+      }>;
+    };
+  };
+  CapabilitiesUnavailable: {
+    new (inner: {
+      repository: string;
       message: string;
     }): {
       /**
@@ -2378,14 +2120,14 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ComputeFailed;
+      readonly tag: RecoveryIssue_Tags.CapabilitiesUnavailable;
       readonly inner: Readonly<{
-        alg: string;
+        repository: string;
         message: string;
       }>;
     };
     "new"(inner: {
-      alg: string;
+      repository: string;
       message: string;
     }): {
       /**
@@ -2393,9 +2135,9 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ComputeFailed;
+      readonly tag: RecoveryIssue_Tags.CapabilitiesUnavailable;
       readonly inner: Readonly<{
-        alg: string;
+        repository: string;
         message: string;
       }>;
     };
@@ -2405,17 +2147,56 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ComputeFailed;
+      readonly tag: RecoveryIssue_Tags.CapabilitiesUnavailable;
       readonly inner: Readonly<{
-        alg: string;
+        repository: string;
         message: string;
       }>;
     };
   };
-  BindingFailed: {
+  TooLarge: {
+    new (inner: {
+      maxUploadBytes: bigint;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.TooLarge;
+      readonly inner: Readonly<{
+        maxUploadBytes: bigint;
+      }>;
+    };
+    "new"(inner: {
+      maxUploadBytes: bigint;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.TooLarge;
+      readonly inner: Readonly<{
+        maxUploadBytes: bigint;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.TooLarge;
+      readonly inner: Readonly<{
+        maxUploadBytes: bigint;
+      }>;
+    };
+  };
+  FetchFailed: {
     new (inner: {
       repository: string;
-      alg: string;
+      manifestId: string;
       message: string;
     }): {
       /**
@@ -2423,16 +2204,16 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingFailed;
+      readonly tag: RecoveryIssue_Tags.FetchFailed;
       readonly inner: Readonly<{
         repository: string;
-        alg: string;
+        manifestId: string;
         message: string;
       }>;
     };
     "new"(inner: {
       repository: string;
-      alg: string;
+      manifestId: string;
       message: string;
     }): {
       /**
@@ -2440,10 +2221,10 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingFailed;
+      readonly tag: RecoveryIssue_Tags.FetchFailed;
       readonly inner: Readonly<{
         repository: string;
-        alg: string;
+        manifestId: string;
         message: string;
       }>;
     };
@@ -2453,96 +2234,242 @@ export declare const RecoveryIssue: Readonly<{
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.BindingFailed;
+      readonly tag: RecoveryIssue_Tags.FetchFailed;
       readonly inner: Readonly<{
         repository: string;
-        alg: string;
+        manifestId: string;
         message: string;
       }>;
     };
   };
-  QueryRefused: {
+  CandidateInvalid: {
+    new (inner: {
+      manifestId: string;
+      reason: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateInvalid;
+      readonly inner: Readonly<{
+        manifestId: string;
+        reason: string;
+      }>;
+    };
+    "new"(inner: {
+      manifestId: string;
+      reason: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateInvalid;
+      readonly inner: Readonly<{
+        manifestId: string;
+        reason: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.CandidateInvalid;
+      readonly inner: Readonly<{
+        manifestId: string;
+        reason: string;
+      }>;
+    };
+  };
+  EndpointRefused: {
     new (inner: {
       repository: string;
-      alg: string;
-      message: string;
+      manifestId: string;
+      endpoint: string;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly tag: RecoveryIssue_Tags.EndpointRefused;
       readonly inner: Readonly<{
         repository: string;
-        alg: string;
-        message: string;
+        manifestId: string;
+        endpoint: string;
       }>;
     };
     "new"(inner: {
       repository: string;
-      alg: string;
-      message: string;
+      manifestId: string;
+      endpoint: string;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly tag: RecoveryIssue_Tags.EndpointRefused;
       readonly inner: Readonly<{
         repository: string;
-        alg: string;
+        manifestId: string;
+        endpoint: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.EndpointRefused;
+      readonly inner: Readonly<{
+        repository: string;
+        manifestId: string;
+        endpoint: string;
+      }>;
+    };
+  };
+  LimitReached: {
+    new (inner: {
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.LimitReached;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+    "new"(inner: {
+      message: string;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.LimitReached;
+      readonly inner: Readonly<{
+        message: string;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
+      readonly tag: RecoveryIssue_Tags.LimitReached;
+      readonly inner: Readonly<{
         message: string;
       }>;
     };
+  };
+}>;
+/**
+ * Why repository recovery did not complete cleanly, or why one candidate was omitted while another
+ * succeeded. Kept as data so a partial recovery never loses the rest of the lookup outcome, and
+ * each kind carries exactly what it is about.
+ */
+export type RecoveryIssue = InstanceType<typeof RecoveryIssue['ComputeFailed' | 'BindingFailed' | 'QueryRefused' | 'ContentFailed' | 'CapabilitiesUnavailable' | 'TooLarge' | 'FetchFailed' | 'CandidateInvalid' | 'EndpointRefused' | 'LimitReached']>;
+/**
+ * The value a content query was hinted with, under its own algorithm.
+ */
+export type Hint = {
+  alg: string;
+  value: ArrayBuffer;
+};
+/**
+ * Generated factory for {@link Hint} record objects.
+ */
+export declare const Hint: Readonly<{
+  create: (partial: Partial<Hint> & Required<Omit<Hint, never>>) => Hint;
+  new: (partial: Partial<Hint> & Required<Omit<Hint, never>>) => Hint;
+  defaults: () => Partial<Hint>;
+}>;
+export declare enum DiscoveryVia_Tags {
+  ByBinding = "ByBinding",
+  ByContent = "ByContent",
+  ByReference = "ByReference"
+}
+/**
+ * The Soft Binding Resolution API route a discovery came through.
+ */
+export declare const DiscoveryVia: Readonly<{
+  instanceOf: (obj: any) => obj is DiscoveryVia;
+  ByBinding: {
+    new (inner: {
+      value: ArrayBuffer;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByBinding;
+      readonly inner: Readonly<{
+        value: ArrayBuffer;
+      }>;
+    };
+    "new"(inner: {
+      value: ArrayBuffer;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByBinding;
+      readonly inner: Readonly<{
+        value: ArrayBuffer;
+      }>;
+    };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.QueryRefused;
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByBinding;
       readonly inner: Readonly<{
-        repository: string;
-        alg: string;
-        message: string;
+        value: ArrayBuffer;
       }>;
     };
   };
-  ContentFailed: {
+  ByContent: {
     new (inner: {
-      repository: string;
-      alg: string;
-      message: string;
+      hint?: Hint;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentFailed;
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByContent;
       readonly inner: Readonly<{
-        repository: string;
-        alg: string;
-        message: string;
+        hint?: Hint;
       }>;
     };
     "new"(inner: {
-      repository: string;
-      alg: string;
-      message: string;
+      hint?: Hint;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentFailed;
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByContent;
       readonly inner: Readonly<{
-        repository: string;
-        alg: string;
-        message: string;
+        hint?: Hint;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2550,44 +2477,38 @@ export declare const RecoveryIssue: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.ContentFailed;
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByContent;
       readonly inner: Readonly<{
-        repository: string;
-        alg: string;
-        message: string;
+        hint?: Hint;
       }>;
     };
   };
-  CapabilitiesUnavailable: {
+  ByReference: {
     new (inner: {
-      repository: string;
-      message: string;
+      hint?: Hint;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CapabilitiesUnavailable;
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByReference;
       readonly inner: Readonly<{
-        repository: string;
-        message: string;
+        hint?: Hint;
       }>;
     };
     "new"(inner: {
-      repository: string;
-      message: string;
+      hint?: Hint;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CapabilitiesUnavailable;
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByReference;
       readonly inner: Readonly<{
-        repository: string;
-        message: string;
+        hint?: Hint;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2595,131 +2516,150 @@ export declare const RecoveryIssue: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CapabilitiesUnavailable;
+      readonly [uniffiTypeNameSymbol]: "DiscoveryVia";
+      readonly tag: DiscoveryVia_Tags.ByReference;
       readonly inner: Readonly<{
-        repository: string;
-        message: string;
+        hint?: Hint;
       }>;
     };
   };
-  TooLarge: {
-    new (inner: {
-      maxUploadBytes: bigint;
-    }): {
+}>;
+/**
+ * The Soft Binding Resolution API route a discovery came through.
+ */
+export type DiscoveryVia = InstanceType<typeof DiscoveryVia['ByBinding' | 'ByContent' | 'ByReference']>;
+/**
+ * The C2PA list's `type` of a soft binding algorithm.
+ */
+export declare enum SoftBindingType {
+  Fingerprint = 0,
+  Watermark = 1
+}
+/**
+ * Typealias from the type name used in the UDL file to the builtin type.  This
+ * is needed because the UDL type name is used in function/method signatures.
+ */
+export type SimilarityScore = number;
+/**
+ * One query that located a recovered credential: how it was asked, under which algorithm, and
+ * where the manifest came from.
+ */
+export type Discovery = {
+  via: DiscoveryVia;
+  alg: string;
+  type: SoftBindingType;
+  /**
+   * The repository's `similarityScore`, 0-100.
+   */
+  score?: SimilarityScore;
+  repository: string;
+  endpoint?: string;
+};
+/**
+ * Generated factory for {@link Discovery} record objects.
+ */
+export declare const Discovery: Readonly<{
+  create: (partial: Partial<Discovery> & Required<Omit<Discovery, "endpoint" | "score">>) => Discovery;
+  new: (partial: Partial<Discovery> & Required<Omit<Discovery, "endpoint" | "score">>) => Discovery;
+  defaults: () => Partial<Discovery>;
+}>;
+export declare enum FingerprintCheck_Tags {
+  NotNeeded = "NotNeeded",
+  Missing = "Missing",
+  Unsupported = "Unsupported",
+  Indeterminate = "Indeterminate",
+  Compared = "Compared"
+}
+/**
+ * Whether the asset's own fingerprint backs up a manifest that a watermark led to.
+ *
+ * C2PA 2.4 Soft Binding API section 1.2.2.3: a watermark can be lifted from one asset onto another, so a mark alone does
+ * not establish that the manifest it resolves to describes THIS asset. The mitigation the spec
+ * gives is to compare a fingerprint computed from the asset against the one the recovered
+ * manifest records, and `watermark-and-fingerprint` ends on exactly that comparison.
+ *
+ * Reported rather than enforced: a transcode legitimately shifts a fingerprint, so where the line
+ * falls is the relying party's policy, not this SDK's. What the SDK owes them is the measurement.
+ */
+export declare const FingerprintCheck: Readonly<{
+  instanceOf: (obj: any) => obj is FingerprintCheck;
+  NotNeeded: {
+    new (): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.TooLarge;
-      readonly inner: Readonly<{
-        maxUploadBytes: bigint;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.NotNeeded;
     };
-    "new"(inner: {
-      maxUploadBytes: bigint;
-    }): {
+    "new"(): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.TooLarge;
-      readonly inner: Readonly<{
-        maxUploadBytes: bigint;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.NotNeeded;
     };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.TooLarge;
-      readonly inner: Readonly<{
-        maxUploadBytes: bigint;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.NotNeeded;
     };
   };
-  FetchFailed: {
-    new (inner: {
-      repository: string;
-      manifestId: string;
-      message: string;
-    }): {
+  Missing: {
+    new (): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.FetchFailed;
-      readonly inner: Readonly<{
-        repository: string;
-        manifestId: string;
-        message: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Missing;
     };
-    "new"(inner: {
-      repository: string;
-      manifestId: string;
-      message: string;
-    }): {
+    "new"(): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.FetchFailed;
-      readonly inner: Readonly<{
-        repository: string;
-        manifestId: string;
-        message: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Missing;
     };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.FetchFailed;
-      readonly inner: Readonly<{
-        repository: string;
-        manifestId: string;
-        message: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Missing;
     };
   };
-  CandidateInvalid: {
+  Unsupported: {
     new (inner: {
-      manifestId: string;
-      reason: string;
+      alg: string;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CandidateInvalid;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Unsupported;
       readonly inner: Readonly<{
-        manifestId: string;
-        reason: string;
+        alg: string;
       }>;
     };
     "new"(inner: {
-      manifestId: string;
-      reason: string;
+      alg: string;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CandidateInvalid;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Unsupported;
       readonly inner: Readonly<{
-        manifestId: string;
-        reason: string;
+        alg: string;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2727,88 +2667,64 @@ export declare const RecoveryIssue: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.CandidateInvalid;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Unsupported;
       readonly inner: Readonly<{
-        manifestId: string;
-        reason: string;
+        alg: string;
       }>;
     };
   };
-  EndpointRefused: {
-    new (inner: {
-      repository: string;
-      manifestId: string;
-      endpoint: string;
-    }): {
+  Indeterminate: {
+    new (): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.EndpointRefused;
-      readonly inner: Readonly<{
-        repository: string;
-        manifestId: string;
-        endpoint: string;
-      }>;
-    };
-    "new"(inner: {
-      repository: string;
-      manifestId: string;
-      endpoint: string;
-    }): {
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Indeterminate;
+    };
+    "new"(): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.EndpointRefused;
-      readonly inner: Readonly<{
-        repository: string;
-        manifestId: string;
-        endpoint: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Indeterminate;
     };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.EndpointRefused;
-      readonly inner: Readonly<{
-        repository: string;
-        manifestId: string;
-        endpoint: string;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Indeterminate;
     };
   };
-  LimitReached: {
+  Compared: {
     new (inner: {
-      message: string;
+      score: SimilarityScore;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.LimitReached;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Compared;
       readonly inner: Readonly<{
-        message: string;
+        score: SimilarityScore;
       }>;
     };
     "new"(inner: {
-      message: string;
+      score: SimilarityScore;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.LimitReached;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Compared;
       readonly inner: Readonly<{
-        message: string;
+        score: SimilarityScore;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2816,111 +2732,185 @@ export declare const RecoveryIssue: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "RecoveryIssue";
-      readonly tag: RecoveryIssue_Tags.LimitReached;
+      readonly [uniffiTypeNameSymbol]: "FingerprintCheck";
+      readonly tag: FingerprintCheck_Tags.Compared;
       readonly inner: Readonly<{
-        message: string;
+        score: SimilarityScore;
       }>;
     };
   };
 }>;
 /**
- * Why repository recovery did not complete cleanly, or why one candidate was omitted while another
- * succeeded. Kept as data so a partial recovery never loses the rest of the lookup outcome, and
- * each kind carries exactly what it is about.
+ * Whether the asset's own fingerprint backs up a manifest that a watermark led to.
+ *
+ * C2PA 2.4 Soft Binding API section 1.2.2.3: a watermark can be lifted from one asset onto another, so a mark alone does
+ * not establish that the manifest it resolves to describes THIS asset. The mitigation the spec
+ * gives is to compare a fingerprint computed from the asset against the one the recovered
+ * manifest records, and `watermark-and-fingerprint` ends on exactly that comparison.
+ *
+ * Reported rather than enforced: a transcode legitimately shifts a fingerprint, so where the line
+ * falls is the relying party's policy, not this SDK's. What the SDK owes them is the measurement.
  */
-export type RecoveryIssue = InstanceType<typeof RecoveryIssue['ComputeFailed' | 'BindingFailed' | 'QueryRefused' | 'ContentFailed' | 'CapabilitiesUnavailable' | 'TooLarge' | 'FetchFailed' | 'CandidateInvalid' | 'EndpointRefused' | 'LimitReached']>;
+export type FingerprintCheck = InstanceType<typeof FingerprintCheck['NotNeeded' | 'Missing' | 'Unsupported' | 'Indeterminate' | 'Compared']>;
+/**
+ * C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison of one recovered
+ * credential against the manifest the asset carries.
+ */
+export declare enum ManifestComparison {
+  /**
+   * The recovered credential is the embedded one, claim for claim.
+   */
+  Same = 0,
+  /**
+   * It is another manifest: what a substitution looks like.
+   */
+  Different = 1,
+  /**
+   * One side has no active manifest to compare.
+   */
+  Unreadable = 2
+}
 /**
- * Repository recovery outcome and every non-fatal issue encountered on the way.
+ * A credential recovery found: the store, where it was fetched, every query that led to it, and
+ * whether the asset's own fingerprint backs up a mark among them (C2PA 2.4 Soft Binding API
+ * section 1.2.2.3).
  */
-export type RecoverySummary = {
-  status: RecoveryStatus;
-  issues: Array<RecoveryIssue>;
+export type RecoveredCredential = {
+  credential: CredentialLike;
+  /**
+   * `GET /manifests/{manifestId}` at the resolution API that served it.
+   */
+  url: string;
+  discoveries: Array<Discovery>;
+  fingerprintCheck: FingerprintCheck;
+  /**
+   * This credential against the embedded one, present exactly when they were compared.
+   */
+  comparison?: ManifestComparison;
 };
 /**
- * Generated factory for {@link RecoverySummary} record objects.
+ * Generated factory for {@link RecoveredCredential} record objects.
  */
-export declare const RecoverySummary: Readonly<{
-  create: (partial: Partial<RecoverySummary> & Required<Omit<RecoverySummary, never>>) => RecoverySummary;
-  new: (partial: Partial<RecoverySummary> & Required<Omit<RecoverySummary, never>>) => RecoverySummary;
-  defaults: () => Partial<RecoverySummary>;
+export declare const RecoveredCredential: Readonly<{
+  create: (partial: Partial<RecoveredCredential> & Required<Omit<RecoveredCredential, "comparison">>) => RecoveredCredential;
+  new: (partial: Partial<RecoveredCredential> & Required<Omit<RecoveredCredential, "comparison">>) => RecoveredCredential;
+  defaults: () => Partial<RecoveredCredential>;
 }>;
-export declare enum Golden_Tags {
-  Matches = "Matches",
-  Differs = "Differs",
-  NoneMatches = "NoneMatches",
-  Unreadable = "Unreadable"
+export declare enum Recovered_Tags {
+  NotRequested = "NotRequested",
+  Skipped = "Skipped",
+  NotFound = "NotFound",
+  Incomplete = "Incomplete",
+  Found = "Found"
 }
 /**
- * C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison: the embedded active
- * manifest against what the repository holds.
+ * What recovery did.
  */
-export declare const Golden: Readonly<{
-  instanceOf: (obj: any) => obj is Golden;
-  Matches: {
-    new (inner: {
-      index: number;
-    }): {
+export declare const Recovered: Readonly<{
+  instanceOf: (obj: any) => obj is Recovered;
+  NotRequested: {
+    new (): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Matches;
-      readonly inner: Readonly<{
-        index: number;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.NotRequested;
     };
-    "new"(inner: {
-      index: number;
-    }): {
+    "new"(): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Matches;
-      readonly inner: Readonly<{
-        index: number;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.NotRequested;
     };
     instanceOf(obj: any): obj is {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Matches;
-      readonly inner: Readonly<{
-        index: number;
-      }>;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.NotRequested;
+    };
+  };
+  Skipped: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Skipped;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Skipped;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Skipped;
+    };
+  };
+  NotFound: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.NotFound;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.NotFound;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.NotFound;
     };
   };
-  Differs: {
+  Incomplete: {
     new (inner: {
-      index: number;
+      issues: Array<RecoveryIssue>;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Differs;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Incomplete;
       readonly inner: Readonly<{
-        index: number;
+        issues: Array<RecoveryIssue>;
       }>;
     };
     "new"(inner: {
-      index: number;
+      issues: Array<RecoveryIssue>;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Differs;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Incomplete;
       readonly inner: Readonly<{
-        index: number;
+        issues: Array<RecoveryIssue>;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2928,38 +2918,42 @@ export declare const Golden: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Differs;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Incomplete;
       readonly inner: Readonly<{
-        index: number;
+        issues: Array<RecoveryIssue>;
       }>;
     };
   };
-  NoneMatches: {
+  Found: {
     new (inner: {
-      candidates: Array<number>;
+      credentials: Array<RecoveredCredential>;
+      issues: Array<RecoveryIssue>;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.NoneMatches;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Found;
       readonly inner: Readonly<{
-        candidates: Array<number>;
+        credentials: Array<RecoveredCredential>;
+        issues: Array<RecoveryIssue>;
       }>;
     };
     "new"(inner: {
-      candidates: Array<number>;
+      credentials: Array<RecoveredCredential>;
+      issues: Array<RecoveryIssue>;
     }): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.NoneMatches;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Found;
       readonly inner: Readonly<{
-        candidates: Array<number>;
+        credentials: Array<RecoveredCredential>;
+        issues: Array<RecoveryIssue>;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -2967,14 +2961,70 @@ export declare const Golden: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.NoneMatches;
+      readonly [uniffiTypeNameSymbol]: "Recovered";
+      readonly tag: Recovered_Tags.Found;
       readonly inner: Readonly<{
-        candidates: Array<number>;
+        credentials: Array<RecoveredCredential>;
+        issues: Array<RecoveryIssue>;
       }>;
     };
   };
-  Unreadable: {
+}>;
+/**
+ * What recovery did.
+ */
+export type Recovered = InstanceType<typeof Recovered['NotRequested' | 'Skipped' | 'NotFound' | 'Incomplete' | 'Found']>;
+/**
+ * The evidence that singled a recovered verdict out.
+ */
+export declare enum VerdictRule {
+  OnlyCandidate = 0,
+  /**
+   * Its hash holds over these bytes and no other candidate's does.
+   */
+  HardBinding = 1,
+  /**
+   * Every other candidate with the same hard-binding standing is superseded by an authentic
+   * credential in this report.
+   */
+  NotSuperseded = 2
+}
+export declare enum CredentialRef_Tags {
+  Embedded = "Embedded",
+  Recovered = "Recovered"
+}
+/**
+ * A credential a verdict names, by the section of the report it sits in.
+ */
+export declare const CredentialRef: Readonly<{
+  instanceOf: (obj: any) => obj is CredentialRef;
+  Embedded: {
+    new (): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialRef";
+      readonly tag: CredentialRef_Tags.Embedded;
+    };
+    "new"(): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialRef";
+      readonly tag: CredentialRef_Tags.Embedded;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "CredentialRef";
+      readonly tag: CredentialRef_Tags.Embedded;
+    };
+  };
+  Recovered: {
     new (inner: {
       index: number;
     }): {
@@ -2982,8 +3032,8 @@ export declare const Golden: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Unreadable;
+      readonly [uniffiTypeNameSymbol]: "CredentialRef";
+      readonly tag: CredentialRef_Tags.Recovered;
       readonly inner: Readonly<{
         index: number;
       }>;
@@ -2995,8 +3045,8 @@ export declare const Golden: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Unreadable;
+      readonly [uniffiTypeNameSymbol]: "CredentialRef";
+      readonly tag: CredentialRef_Tags.Recovered;
       readonly inner: Readonly<{
         index: number;
       }>;
@@ -3006,8 +3056,8 @@ export declare const Golden: Readonly<{
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
-      readonly [uniffiTypeNameSymbol]: "Golden";
-      readonly tag: Golden_Tags.Unreadable;
+      readonly [uniffiTypeNameSymbol]: "CredentialRef";
+      readonly tag: CredentialRef_Tags.Recovered;
       readonly inner: Readonly<{
         index: number;
       }>;
@@ -3015,54 +3065,40 @@ export declare const Golden: Readonly<{
   };
 }>;
 /**
- * C2PA 2.4's `watermark-golden` / `fingerprint-golden` final comparison: the embedded active
- * manifest against what the repository holds.
- */
-export type Golden = InstanceType<typeof Golden['Matches' | 'Differs' | 'NoneMatches' | 'Unreadable']>;
-/**
- * The evidence that singled a recovered verdict out.
+ * A credential a verdict names, by the section of the report it sits in.
  */
-export declare enum VerdictRule {
-  OnlyCandidate = 0,
-  /**
-   * Its hash holds over these bytes and no other candidate's does.
-   */
-  HardBinding = 1,
-  /**
-   * Every other candidate with the same hard-binding standing is superseded by a credential
-   * in this report.
-   */
-  NotSuperseded = 2
-}
+export type CredentialRef = InstanceType<typeof CredentialRef['Embedded' | 'Recovered']>;
 export declare enum Verdict_Tags {
   Unsigned = "Unsigned",
   Inconclusive = "Inconclusive",
   Embedded = "Embedded",
   Invalid = "Invalid",
   Recovered = "Recovered",
-  RecoveredDerivative = "RecoveredDerivative",
   Ambiguous = "Ambiguous"
 }
 /**
- * What this verify concludes about the asset, chosen from [`AssetVerification::credentials`](super::AssetVerification::credentials)
- * on signed evidence alone. Policy over the evidence: no credential's validation state changes,
- * and the list stays whole beside it.
+ * What this verify concludes about the asset, chosen among the credentials it found on signed
+ * evidence alone. Policy over the evidence: no credential's validation state changes, and every
+ * credential stays in the report beside it, which a verdict names by the section it sits in.
  *
- * The embedded manifest is the verdict whenever the asset carries one that is not `Invalid`
- * and the golden comparison does not contradict it. When it `differs` from what the repository
- * holds, or several recovered candidates leave the comparison indeterminate, the embedded and
- * the recovered manifests are reported as ambiguous: C2PA 2.4's substitution use case leaves
- * that trust decision to the client.
+ * The embedded manifest is the verdict whenever it stands, unless the golden comparison finds it
+ * contradicted: a signed recovered credential is `Different`, even beside one that is the `Same`.
+ * Then the embedded and those are reported as ambiguous: C2PA's substitution use cases (UC2, UC3)
+ * leave the trust decision between them to the client, so a contradiction needs a signature that
+ * holds, not a signer this verify trusts. A forged one contradicts nothing, and neither does the
+ * embedded manifest's own `parentOf` when an authentic signer states it: that is its history.
  *
- * Otherwise a recovered candidate is named only when evidence singles it out, and only among
- * those that are authentic (they fail on nothing but a hash mismatch) and state a hard binding.
- * The verdict is about THESE bytes, so a candidate whose hash holds over them outranks any whose
- * hash does not, whatever the repository calls its head; among equals, one that no other
- * credential supersedes (the successor's signed `parentOf` link) outranks the rest. A repository
- * score, a signature time or a position in the list is not evidence of which manifest belongs to
- * these bytes, so candidates those alone would separate are reported as ambiguous. When no
- * credential is both authentic and bound to some bytes, the verdict is `Invalid`, never a
- * recovered one: a manifest that fails its own signature or signer vouches for nothing.
+ * Among recovered credentials, only an authentic one (trusted, failing on nothing but a hash
+ * mismatch) that states a hard binding is evidence.
+ *
+ * Otherwise a recovered credential is named only when evidence singles it out among those. The
+ * verdict is about THESE bytes, so one whose hash holds over them outranks any whose hash does
+ * not, whatever the repository calls its head; among equals, one that no authentic credential
+ * supersedes (the successor's signed `parentOf` link) outranks the rest. A repository score, a
+ * signature time or a position in the list is not evidence of which manifest belongs to these
+ * bytes, so credentials those alone would separate are reported as ambiguous. When the verify
+ * found credentials and none is evidence, the verdict is `Invalid`: a manifest that fails its own
+ * signature or signer vouches for nothing.
  */
 export declare const Verdict: Readonly<{
   instanceOf: (obj: any) => obj is Verdict;
@@ -3145,31 +3181,21 @@ export declare const Verdict: Readonly<{
     };
   };
   Invalid: {
-    new (inner: {
-      index: number;
-    }): {
+    new (): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "Verdict";
       readonly tag: Verdict_Tags.Invalid;
-      readonly inner: Readonly<{
-        index: number;
-      }>;
     };
-    "new"(inner: {
-      index: number;
-    }): {
+    "new"(): {
       /**
        * @private
        * This field is private and should not be used, use `tag` instead.
        */
       readonly [uniffiTypeNameSymbol]: "Verdict";
       readonly tag: Verdict_Tags.Invalid;
-      readonly inner: Readonly<{
-        index: number;
-      }>;
     };
     instanceOf(obj: any): obj is {
       /**
@@ -3178,9 +3204,6 @@ export declare const Verdict: Readonly<{
        */
       readonly [uniffiTypeNameSymbol]: "Verdict";
       readonly tag: Verdict_Tags.Invalid;
-      readonly inner: Readonly<{
-        index: number;
-      }>;
     };
   };
   Recovered: {
@@ -3227,53 +3250,9 @@ export declare const Verdict: Readonly<{
       }>;
     };
   };
-  RecoveredDerivative: {
-    new (inner: {
-      index: number;
-      decidedBy: VerdictRule;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "Verdict";
-      readonly tag: Verdict_Tags.RecoveredDerivative;
-      readonly inner: Readonly<{
-        index: number;
-        decidedBy: VerdictRule;
-      }>;
-    };
-    "new"(inner: {
-      index: number;
-      decidedBy: VerdictRule;
-    }): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "Verdict";
-      readonly tag: Verdict_Tags.RecoveredDerivative;
-      readonly inner: Readonly<{
-        index: number;
-        decidedBy: VerdictRule;
-      }>;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "Verdict";
-      readonly tag: Verdict_Tags.RecoveredDerivative;
-      readonly inner: Readonly<{
-        index: number;
-        decidedBy: VerdictRule;
-      }>;
-    };
-  };
   Ambiguous: {
     new (inner: {
-      candidates: Array<number>;
+      candidates: Array<CredentialRef>;
     }): {
       /**
        * @private
@@ -3282,11 +3261,11 @@ export declare const Verdict: Readonly<{
       readonly [uniffiTypeNameSymbol]: "Verdict";
       readonly tag: Verdict_Tags.Ambiguous;
       readonly inner: Readonly<{
-        candidates: Array<number>;
+        candidates: Array<CredentialRef>;
       }>;
     };
     "new"(inner: {
-      candidates: Array<number>;
+      candidates: Array<CredentialRef>;
     }): {
       /**
        * @private
@@ -3295,7 +3274,7 @@ export declare const Verdict: Readonly<{
       readonly [uniffiTypeNameSymbol]: "Verdict";
       readonly tag: Verdict_Tags.Ambiguous;
       readonly inner: Readonly<{
-        candidates: Array<number>;
+        candidates: Array<CredentialRef>;
       }>;
     };
     instanceOf(obj: any): obj is {
@@ -3306,50 +3285,54 @@ export declare const Verdict: Readonly<{
       readonly [uniffiTypeNameSymbol]: "Verdict";
       readonly tag: Verdict_Tags.Ambiguous;
       readonly inner: Readonly<{
-        candidates: Array<number>;
+        candidates: Array<CredentialRef>;
       }>;
     };
   };
 }>;
 /**
- * What this verify concludes about the asset, chosen from [`AssetVerification::credentials`](super::AssetVerification::credentials)
- * on signed evidence alone. Policy over the evidence: no credential's validation state changes,
- * and the list stays whole beside it.
+ * What this verify concludes about the asset, chosen among the credentials it found on signed
+ * evidence alone. Policy over the evidence: no credential's validation state changes, and every
+ * credential stays in the report beside it, which a verdict names by the section it sits in.
  *
- * The embedded manifest is the verdict whenever the asset carries one that is not `Invalid`
- * and the golden comparison does not contradict it. When it `differs` from what the repository
- * holds, or several recovered candidates leave the comparison indeterminate, the embedded and
- * the recovered manifests are reported as ambiguous: C2PA 2.4's substitution use case leaves
- * that trust decision to the client.
+ * The embedded manifest is the verdict whenever it stands, unless the golden comparison finds it
+ * contradicted: a signed recovered credential is `Different`, even beside one that is the `Same`.
+ * Then the embedded and those are reported as ambiguous: C2PA's substitution use cases (UC2, UC3)
+ * leave the trust decision between them to the client, so a contradiction needs a signature that
+ * holds, not a signer this verify trusts. A forged one contradicts nothing, and neither does the
+ * embedded manifest's own `parentOf` when an authentic signer states it: that is its history.
  *
- * Otherwise a recovered candidate is named only when evidence singles it out, and only among
- * those that are authentic (they fail on nothing but a hash mismatch) and state a hard binding.
- * The verdict is about THESE bytes, so a candidate whose hash holds over them outranks any whose
- * hash does not, whatever the repository calls its head; among equals, one that no other
- * credential supersedes (the successor's signed `parentOf` link) outranks the rest. A repository
- * score, a signature time or a position in the list is not evidence of which manifest belongs to
- * these bytes, so candidates those alone would separate are reported as ambiguous. When no
- * credential is both authentic and bound to some bytes, the verdict is `Invalid`, never a
- * recovered one: a manifest that fails its own signature or signer vouches for nothing.
- */
-export type Verdict = InstanceType<typeof Verdict['Unsigned' | 'Inconclusive' | 'Embedded' | 'Invalid' | 'Recovered' | 'RecoveredDerivative' | 'Ambiguous']>;
-/**
- * Complete asset verification result: every credential, the recovery state, the C2PA
- * golden-flow comparison when there was something to compare, and the verdict the SDK's rules
- * choose. See [`asset::verdict::Verdict`].
+ * Among recovered credentials, only an authentic one (trusted, failing on nothing but a hash
+ * mismatch) that states a hard binding is evidence.
+ *
+ * Otherwise a recovered credential is named only when evidence singles it out among those. The
+ * verdict is about THESE bytes, so one whose hash holds over them outranks any whose hash does
+ * not, whatever the repository calls its head; among equals, one that no authentic credential
+ * supersedes (the successor's signed `parentOf` link) outranks the rest. A repository score, a
+ * signature time or a position in the list is not evidence of which manifest belongs to these
+ * bytes, so credentials those alone would separate are reported as ambiguous. When the verify
+ * found credentials and none is evidence, the verdict is `Invalid`: a manifest that fails its own
+ * signature or signer vouches for nothing.
+ */
+export type Verdict = InstanceType<typeof Verdict['Unsigned' | 'Inconclusive' | 'Embedded' | 'Invalid' | 'Recovered' | 'Ambiguous']>;
+/**
+ * Complete asset verification result, one section per step, the verdict naming a credential
+ * by its section.
  */
 export type AssetVerification = {
-  credentials: Array<CredentialLike>;
-  recovery: RecoverySummary;
-  golden?: Golden;
+  /**
+   * The manifest the asset carries, standing or not.
+   */
+  embedded?: CredentialLike;
+  recovered: Recovered;
   verdict: Verdict;
 };
 /**
  * Generated factory for {@link AssetVerification} record objects.
  */
 export declare const AssetVerification: Readonly<{
-  create: (partial: Partial<AssetVerification> & Required<Omit<AssetVerification, "golden">>) => AssetVerification;
-  new: (partial: Partial<AssetVerification> & Required<Omit<AssetVerification, "golden">>) => AssetVerification;
+  create: (partial: Partial<AssetVerification> & Required<Omit<AssetVerification, "embedded">>) => AssetVerification;
+  new: (partial: Partial<AssetVerification> & Required<Omit<AssetVerification, "embedded">>) => AssetVerification;
   defaults: () => Partial<AssetVerification>;
 }>;
 export declare enum Repository_Tags {
@@ -4331,9 +4314,9 @@ export declare enum RecoveryTrigger {
    *
    * It queries the repository on every verify, without making it load-bearing on the asset's own
    * credential: the flow provides information about a substitution rather than gating the local
-   * manifest, so a repository that cannot be reached leaves [`RecoveryStatus::Incomplete`](super::RecoveryStatus::Incomplete), the
-   * reason as a [`RecoveryIssue`](super::RecoveryIssue), and no [`Golden`](super::golden::Golden). A caller for whom a cross-check that never
-   * ran must not pass for agreement branches on that status.
+   * manifest, so a repository that cannot be reached leaves [`Recovered::Incomplete`](super::Recovered::Incomplete), which
+   * carries the reason as a [`RecoveryIssue`](super::RecoveryIssue) and no credential to compare. A caller for whom a
+   * cross-check that never ran must not pass for agreement branches on that state.
    */
   Always = 1
 }
@@ -4663,8 +4646,7 @@ export interface AssetVerifierLike {
    * a manifest, or nothing: then the asset is read for what it carries and no repository is
    * asked. `plugins` are the caller's additional container readers, in dispatch order.
    * An empty list uses the registered C2PA handlers, including any loaded native modules.
-   * Returns embedded/recovered credentials plus typed recovery and golden-comparison
-   * outcomes.
+   * Returns the embedded credential, what recovery did, and the verdict over both.
    * `format` optionally declares the media type for inputs such as SVG and plain text.
    *
    * # Errors
@@ -4703,8 +4685,7 @@ export declare class AssetVerifier extends UniffiAbstractObject implements Asset
    * a manifest, or nothing: then the asset is read for what it carries and no repository is
    * asked. `plugins` are the caller's additional container readers, in dispatch order.
    * An empty list uses the registered C2PA handlers, including any loaded native modules.
-   * Returns embedded/recovered credentials plus typed recovery and golden-comparison
-   * outcomes.
+   * Returns the embedded credential, what recovery did, and the verdict over both.
    * `format` optionally declares the media type for inputs such as SVG and plain text.
    *
    * # Errors
@@ -5108,12 +5089,12 @@ declare const _default$1: Readonly<{
       lower(value: Coordinate, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeCredential: FfiConverterObject<CredentialLike>;
-    FfiConverterTypeCredentialOrigin: {
-      readFromCursor(c: Cursor): CredentialOrigin;
-      writeIntoCursor(value: CredentialOrigin, c: Cursor): void;
-      allocationSize(value: CredentialOrigin): number;
-      lift(value: UniffiByteArray): CredentialOrigin;
-      lower(value: CredentialOrigin, alloc: RustBufferAllocator): UniffiByteArray;
+    FfiConverterTypeCredentialRef: {
+      readFromCursor(c: Cursor): CredentialRef;
+      writeIntoCursor(value: CredentialRef, c: Cursor): void;
+      allocationSize(value: CredentialRef): number;
+      lift(value: UniffiByteArray): CredentialRef;
+      lower(value: CredentialRef, alloc: RustBufferAllocator): UniffiByteArray;
     };
     FfiConverterTypeDataSource: {
       readFromCursor(c: Cursor): DataSource;
@@ -5165,13 +5146,6 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): Frame;
       lower(value: Frame, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeGolden: {
-      readFromCursor(c: Cursor): Golden;
-      writeIntoCursor(value: Golden, c: Cursor): void;
-      allocationSize(value: Golden): number;
-      lift(value: UniffiByteArray): Golden;
-      lower(value: Golden, alloc: RustBufferAllocator): UniffiByteArray;
-    };
     FfiConverterTypeHardBinding: {
       readFromCursor(c: Cursor): HardBinding;
       writeIntoCursor(value: HardBinding, c: Cursor): void;
@@ -5250,6 +5224,13 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): ManifestAssertionKind;
       lower(value: ManifestAssertionKind, alloc: RustBufferAllocator): UniffiByteArray;
     };
+    FfiConverterTypeManifestComparison: {
+      readFromCursor(c: Cursor): ManifestComparison;
+      writeIntoCursor(value: ManifestComparison, c: Cursor): void;
+      allocationSize(value: ManifestComparison): number;
+      lift(value: UniffiByteArray): ManifestComparison;
+      lower(value: ManifestComparison, alloc: RustBufferAllocator): UniffiByteArray;
+    };
     FfiConverterTypeManifestStore: {
       readFromCursor(c: Cursor): ManifestStore;
       writeIntoCursor(value: ManifestStore, c: Cursor): void;
@@ -5280,6 +5261,20 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): RangeType;
       lower(value: RangeType, alloc: RustBufferAllocator): UniffiByteArray;
     };
+    FfiConverterTypeRecovered: {
+      readFromCursor(c: Cursor): Recovered;
+      writeIntoCursor(value: Recovered, c: Cursor): void;
+      allocationSize(value: Recovered): number;
+      lift(value: UniffiByteArray): Recovered;
+      lower(value: Recovered, alloc: RustBufferAllocator): UniffiByteArray;
+    };
+    FfiConverterTypeRecoveredCredential: {
+      readFromCursor(c: Cursor): RecoveredCredential;
+      writeIntoCursor(value: RecoveredCredential, c: Cursor): void;
+      allocationSize(value: RecoveredCredential): number;
+      lift(value: UniffiByteArray): RecoveredCredential;
+      lower(value: RecoveredCredential, alloc: RustBufferAllocator): UniffiByteArray;
+    };
     FfiConverterTypeRecovery: {
       readFromCursor(c: Cursor): Recovery;
       writeIntoCursor(value: Recovery, c: Cursor): void;
@@ -5294,20 +5289,6 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): RecoveryIssue;
       lower(value: RecoveryIssue, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeRecoveryStatus: {
-      readFromCursor(c: Cursor): RecoveryStatus;
-      writeIntoCursor(value: RecoveryStatus, c: Cursor): void;
-      allocationSize(value: RecoveryStatus): number;
-      lift(value: UniffiByteArray): RecoveryStatus;
-      lower(value: RecoveryStatus, alloc: RustBufferAllocator): UniffiByteArray;
-    };
-    FfiConverterTypeRecoverySummary: {
-      readFromCursor(c: Cursor): RecoverySummary;
-      writeIntoCursor(value: RecoverySummary, c: Cursor): void;
-      allocationSize(value: RecoverySummary): number;
-      lift(value: UniffiByteArray): RecoverySummary;
-      lower(value: RecoverySummary, alloc: RustBufferAllocator): UniffiByteArray;
-    };
     FfiConverterTypeRecoveryTrigger: {
       readFromCursor(c: Cursor): RecoveryTrigger;
       writeIntoCursor(value: RecoveryTrigger, c: Cursor): void;