ExperimentalValidate an untrusted manifest and prove its identity digest still matches its normalized contents, returning the normalized value.
A store hands back whatever was persisted, so any consumer that is about to trust a stored manifest's provenance — versions, attribution, authorization scope — verifies it here first rather than reading fields off unvalidated input.
Storage-neutral contracts for bounded, downloadable offline regions.
This experimental entrypoint provides an IndexedDB adapter for browser persistence and a storage-backed fetch handler for service-worker or fetch integrations. Applications inject request matching, resource loading, and network policy; the SDK owns deterministic manifest identity, credential projection, cache diagnostics, quota admission against the origin's real storage estimate, integrity checks, cancellation, progress semantics, durable edit-queue state, and the composed local-first status that names one honest state across cached reads and undelivered writes. Applications still own connectivity policy, persistence requests, and edit replay transport binding.