Digest of the opaque authorization-scope partition input. Never persisted raw.
Domain separation and the trimmed pre-image match
createOfflineRegionManifest() exactly, so a read can compare its caller's
current scope against a stored manifest's digest without re-deriving either.
Digest of the opaque authorization-scope partition input. Never persisted raw.
Domain separation and the trimmed pre-image match
createOfflineRegionManifest()exactly, so a read can compare its caller's current scope against a stored manifest's digest without re-deriving either.