feat(tee-verifier): stateless dcap_qvl::verify wrapper contract

Cargo.toml

@@ -28,6 +28,7 @@ members = [
     "crates/tee-authority",
     "crates/tee-context",
     "crates/tee-launcher",
+    "crates/tee-verifier",
     "crates/tee-verifier-interface",
     "crates/test-migration-contract",
     "crates/test-parallel-contract",
@@ -67,6 +68,7 @@ near-mpc-sdk = { path = "crates/near-mpc-sdk", version = "0.0.1" }
 near-mpc-signature-verifier = { path = "crates/near-mpc-signature-verifier", version = "0.0.1" }
 node-types = { path = "crates/node-types" }
 tee-authority = { path = "crates/tee-authority" }
+tee-verifier-interface = { path = "crates/tee-verifier-interface" }
 test-port-allocator = { path = "crates/test-port-allocator" }
 test-utils = { path = "crates/test-utils" }
 threshold-signatures = { path = "crates/threshold-signatures" }

crates/tee-verifier/Cargo.toml

@@ -0,0 +1,50 @@
+[package]
+name = "tee-verifier"
+version = { workspace = true }
+license = { workspace = true }
+edition = { workspace = true }
+
+[package.metadata.near.reproducible_build]
+image = "sourcescan/cargo-near:0.21.1-rust-1.93.0"
+image_digest = "sha256:79b789c81ba19ec30794a6b1046b02dcaf5c055994b22cc7c9af67ab5096b095"
+passed_env = []
+container_build_command = [
+    "cargo",
+    "near",
+    "build",
+    "non-reproducible-wasm",
+    "--locked",
+    "--profile=release-contract",
+    "--features",
+    "abi",
+]
+
+[lib]
+crate-type = ["cdylib", "lib"]
+
+[features]
+# Enabled by `cargo near build` (via `--features near-sdk/__abi-generate`)
+# and required for ABI / Borsh schema generation. Pulls in
+# `borsh/unstable__schema` and `BorshSchema` derives on the wire types.
+abi = ["borsh/unstable__schema", "tee-verifier-interface/borsh-schema"]
+# Enables `near_sdk::testing_env!` for tests; the workspace `near-sdk`
+# dependency no longer turns on `unit-testing` by default.
+test-utils = ["near-sdk/unit-testing"]
+
+[dependencies]
+borsh = { workspace = true }
+dcap-qvl = { workspace = true }
+near-sdk = { workspace = true }
+tee-verifier-interface = { workspace = true }
+
+[target.'cfg(target_arch = "wasm32")'.dependencies]
+getrandom = { workspace = true, features = ["custom"] }
+
+[dev-dependencies]
+hex = { workspace = true }
+rstest = { workspace = true }
+tee-verifier = { path = ".", features = ["test-utils"] }
+test-utils = { workspace = true }
+
+[lints]
+workspace = true