A runnable publisher/subscriber over real QUIC, for proving the receipt-bearing
MoQT data path machine-to-machine (not just loopback). The publisher mints a
pinned self-signed cert, signs a group of objects, and streams the group receipt
plus each object with its inclusion proof; the subscriber dials over QUIC,
verifies the group signature against the pinned publisher key, and verifies each
object's payload + proof against the signed root.
Live-verified over a LAN: publisher on one Mac, subscriber on another, all three
objects verified end to end against the pinned key.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
84ec356153