Function verifyEnclaveIdentityEvidence

verifyEnclaveIdentityEvidence(
    evidence: EnclaveIdentityEvidence,
    anchors: EnclaveTrustAnchors,
    expected: ExpectedIdentity,
): Promise<void>
Verifies the enclave wallet binding against fleet-provisioned trust anchors.
Parameters
- evidence: EnclaveIdentityEvidence
  Identity evidence returned by the enclave agent.
- anchors: EnclaveTrustAnchors
  Pinned KMS root and allowed dstack app IDs.
- expected: ExpectedIdentity
  Owner, chain, and epoch requested by the caller.
Returns Promise<void>
Remarks
The dstack chain signs only purpose || publicKey and appId || appRootPub; owner, chain and epoch are bound to the key by the TDX quote report_data (keccak256(userPsId || address)), which v1 stores but does not verify (DCAP is step 4). Until then the agent's derivation check is the backstop.

Throws
When any identity binding or trust check fails.
- Defined in protocol/identity.ts:297