pdfcer v0.36.0 — signature trust evaluation (opt-in)

pdfcer v0.36.0 — Pass 10.3: signature trust evaluation (opt-in, at your own risk)

The trust-store import from v0.33.0 was the anchor pool; this turns it into a
verdict. verify-signatures --trust-from-acrobat chains a signature's signer,
by verifying each certificate's signature, to the AATL/EU-Trusted-List anchors
an installed Acrobat/Reader has downloaded, and reports trusted / untrusted /
signer-unknown.

• Opt-in and at your own risk. Off by default; the flag prints a disclosure.
  Reading Adobe's own downloaded file is a local read; whether relying on it
  fits the Adobe Reader licence is the operator's call, made by an explicit
  opt-in — not a pdfcer legal determination (decision 134).
• A "trusted" result is a signature-chain check ONLY. Certificate
  revocation (CRL/OCSP), validity dates against a clock, and RFC 5280
  CA/key-usage constraints are NOT verified (a later increment). Every
  uncertainty resolves to untrusted, never a false trusted.
• Integrity and trust are independent: a valid signature by an untrusted signer
  is reported as verified-but-untrusted.

Engine API: signature::verify_all_with_trust(graph, bytes, Option<&TrustAnchorSet>).

Portable download

pdfcer-v0.36.0-windows-x64.zip — Windows 10/11 x86_64, single folder, no
installer. Verify with the .sha256 sidecar.