The package verify path is an explicit MVP stub: placeholder payload (mock_message = pkg_content) and zeroed test-signature fallbacks (left by #56 with a TODO(security)). A real scheme signs the package bytes excluding the embedded signature blocks. Source: ffi/zig/src/obli-pkg.zig:377.
https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ
The package verify path is an explicit MVP stub: placeholder payload (
mock_message = pkg_content) and zeroed test-signature fallbacks (left by #56 with a TODO(security)). A real scheme signs the package bytes excluding the embedded signature blocks. Source:ffi/zig/src/obli-pkg.zig:377.https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ