Expand description
On-demand HTTP-fetched rollout manifests. This module is a thin
signed-pair fetcher: it substitutes the canonical RolloutId
({channel}@{channel_ref} per RFC-0008 §6.3) into the URL templates
and returns the raw (manifest, signature) byte pair. It performs no
identifier validation. The caller (manifest_poll) is responsible for
signature verification (verify_rollout_manifest) and identifier
discrimination (parsed RolloutId equality against the requested id);
both checks are mandated by the verify_rollout_manifest docstring.