Module signed_fetch 

Shared HTTP fetch + Bearer-token primitive; verification stays per-task.

Functions

build_client

15s timeout.

fetch_signed_pair

Non-2xx or network error -> Err; caller retains previous state.

fetch_url 🔒

read_token

Re-read each poll so token rotation propagates; None skips auth.

read_trust_config

Re-read each call so trust.json rotation propagates without restart.

read_trust_roots

Re-read each call so trust.json rotation propagates without restart. now lets the verifier accept successor keys during the rotation overlap window (now < retire_at).