# `AshOnetime.Verifier`
[🔗](https://github.com/baselabs/ash_onetime/blob/v1.5.0/lib/ash_onetime/verifier.ex#L1)

Behavior contract for trusted local verification callbacks.

The `context` map passed to `verify/2` is the BOUNDED callback context: `%{resource:,
action:}` — exactly the trusted local facts the admission path derives itself. Caller-
supplied context (actor, tenant, etc.) is NOT forwarded (AGENTS.md: "verification
callbacks return trusted local facts; action input cannot supply pre-verified facts"). If
a future callback needs actor-binding, that is a deliberate, separately-approved decision,
not a latent affordance shipped by the bounded context.

# `algorithm`

```elixir
@callback algorithm() :: :hmac_sha256 | :ed25519
```

# `trust_model`

```elixir
@callback trust_model() :: :same_service | :separated
```

# `verify`

```elixir
@callback verify(raw_token :: binary(), context :: map()) ::
  {:ok, AshOnetime.Verified.t()} | {:error, term()}
```

---

*Consult [api-reference.md](api-reference.md) for complete listing*