Fluxion::TrustAnchor

How a downloaded artifact earns the right to be executed or installed.

A checksumUrl alone is deliberately not a member: fetching the expected digest from the same host that serves the artifact proves nothing, so it is supplemental metadata that must accompany one of these modes.