fn __constructor(env: soroban_sdk::Env)fn register_app_ca(
env: soroban_sdk::Env,
app_address: soroban_sdk::Address,
member_pubkey: soroban_sdk::BytesN<32>,
app_kind: AppKind,
fingerprint: soroban_sdk::BytesN<32>,
pubkey_alg: soroban_sdk::String,
expires_at: u64,
nonce: u64,
auth_payload: soroban_sdk::Bytes,
auth_signature: soroban_sdk::BytesN<64>,
)fn rotate_app_ca(
env: soroban_sdk::Env,
app_address: soroban_sdk::Address,
new_fingerprint: soroban_sdk::BytesN<32>,
new_expires_at: u64,
nonce: u64,
auth_payload: soroban_sdk::Bytes,
auth_signature: soroban_sdk::BytesN<64>,
)fn revoke_by_app(env: soroban_sdk::Env, app_address: soroban_sdk::Address)fn revoke_by_member(
env: soroban_sdk::Env,
app_address: soroban_sdk::Address,
nonce: u64,
auth_payload: soroban_sdk::Bytes,
auth_signature: soroban_sdk::BytesN<64>,
)Returns the stored record if present. The returned status is
transitioned Active -> Expired at view time if expires_at <= now,
so callers don't need to recompute. Storage is not mutated.
fn get_app_ca(
env: soroban_sdk::Env,
app_address: soroban_sdk::Address,
) -> OptionFast trust check used by C2PA verifiers. True iff record exists,
stored status is Active, now < expires_at, and fingerprint matches.
fn is_trusted(
env: soroban_sdk::Env,
app_address: soroban_sdk::Address,
fingerprint: soroban_sdk::BytesN<32>,
) -> boolEvery app address ever registered under member_pubkey, including
revoked ones. Callers filter via get_app_ca for active-only.
fn apps_of_member(
env: soroban_sdk::Env,
member_pubkey: soroban_sdk::BytesN<32>,
) -> soroban_sdk::VecAll registered apps whose stored status is Active. Does not filter
by expiry — that requires per-record reads, which callers can do
selectively via is_trusted or get_app_ca.
fn list_active_apps(env: soroban_sdk::Env) -> soroban_sdk::Vec