pub fn page(
entries: &[Value],
registry: &Registry,
revoked: &Revocations,
) -> ReportExpand description
Runs the three checks over entries, in order.
Authorship is resolved as of each entry’s own seq (D44): a
signature made before its key was revoked stays valid forever, and one
made at or after the revocation is a failure. Revocation is
append-only and positional, so this verdict is stable — re-running it
next year over the same page gives the same answer, which is the
property that makes the log auditable rather than merely current.