Function signChainHead

src/cli/maintain-audit.ts:112–114

(head: string, key: string)

/** HMAC-SHA256 over the chain head. PURE (deterministic). */
export function signChainHead(head: string, key: string): string {
  return createHmac('sha256', key).update(head).digest('hex');
}

/** Timing-safe verification of a head signature. PURE. */
export function verifyChainSignature(head: string, signature: string, key: string): boolean {