OptionalrevocationOptionalauthorityRead-only check plus atomic observe pins only validated manifests; changed locations require confirmed migration.
OptionalpropertyOptional product property scope. Every selected host property must be proven.
OptionaltimeoutOverall deadline, including all evidence and redirect fetches. Default 15 seconds, max 60 seconds.
OptionalmaxPer-response decompressed byte cap. Default 256 KiB, max 20 MiB.
OptionalsignalOptionalretainDefault false. Bodies contain counterparty-controlled content; store as opaque evidence.
OptionaltrustedTrusted egress implementation; takes responsibility for DNS and address policy.
Optionalinit: RequestInitOptionalinit: RequestInit
Defaults to a process-local seven-day hold; supply durable storage across workers/restarts.