Be your own verifier

Verification is a pure function you run in your own backend — not a service to trust. The verdict you act on is one you compute by pinning the keys you trust, then checking the signed (mandate, receipt, attestations) triple. Here is exactly what to pin for this deployment, plus the code.

What you pin (this deployment)

The two halves: adapter operators (whose signed receipts you accept) and issuers (whose attestations you accept). Pin values you have vetted out-of-band, then assertDeployment() cross-checks the deployment's advertised config against them.

The code

A wrong pinned key makes the deployment's real receipt fail your verify — that is the proof you are not trusting the hub. See §2.1 Roles.