Function: verifyCapabilityPin()

function verifyCapabilityPin(currentDigest, config): Promise<AttestationResult>;

Defined in: packages/core/src/introspection/CryptoAttestation.ts:245

Runtime capability pinning — check that the current digest matches what was attested at build time.

Designed to be called once at server startup in the attach() flow.

Parameters

Parameter	Type	Description
currentDigest	ServerDigest	Re-computed server digest
config	ZeroTrustConfig	Zero-trust configuration

Returns

Promise<AttestationResult>

Attestation result

Throws

If failOnMismatch is true and the digest doesn't match