fn echo_trust_from_peer_body<'a>(
body: &Value,
base: EchoTrust<'a>,
) -> EchoTrust<'a>Expand description
The trust an echoed marker should carry after a forward, given the
peer’s response body. The RECEIVING instance is the one that computes
channel_verified (the forwarder holds the sender’s HMAC key, so §D2
step 2 of SPEC_JEKT_CROSS_CHANNEL_TRUST_2026_09_02.md makes it skip
cross-channel verification) and threads it back via
InjectionResponse::channel_verified, exactly as it already does for
effective_tier/requires_stop. Taking it from the body keeps the
sender’s echoed TRUST= consistent with the ESCALATE= the same body
supplies — otherwise a sensitive cross-channel message could echo as
TRUST=self-declared … ESCALATE=none, which contradicts itself (codex
P2 on #3064). A body without the field (an older peer) leaves the
caller’s value alone.