Function compute_verifies

atomic-cli/src/commands/memory/list.rs:156–173

The DID-match-then-verify rule for a memory. Pure over its inputs so it can be unit-tested without a global `IdentityStore`. See the intent list's `compute_verifies` for the full rationale — identical rule, `verify_memory`.

(attested: &bridge::Attestation, verifier: Option<&Verifier>)

/// unit-tested without a global `IdentityStore`. See the intent list's
/// `compute_verifies` for the full rationale — identical rule, `verify_memory`.
fn compute_verifies(attested: &bridge::Attestation, verifier: Option<&Verifier>) -> Verifies {
    let node = match attested {
        bridge::Attestation::Fresh(node) => node,
        bridge::Attestation::Stale(_) | bridge::Attestation::None => return Verifies::Na,
    };
    let verifier = match verifier {
        Some(v) => v,
        None => return Verifies::Na,
    };
    match node.attributed_to.as_deref() {
        Some(signer) if signer == verifier.did => {}
        _ => return Verifies::Na,
    }
    match atomic_canonical::verify_memory(node, &verifier.public_key) {
        Ok(()) => Verifies::Yes,
        Err(_) => Verifies::No,
    }
}

/// The `(kind, status, about)` display columns for a memory. Prefers the attested
/// node when Fresh/Stale; falls back to a lenient lift of the raw memory when