RequestSigner

Request signing is an optional security layer on top of TLS.

Design goals:

• deterministic canonical string

• no payload leakage into headers (only a SHA-256 digest)

• explicit host opt-in (SDK never signs/ships secrets unless provided)

Inheritors