Strict-decodes an application payload and binds its authorship to the MLS
sender: the inner pubkey MUST equal the authenticated sender's Marmot
account identity (foundation/identity.md, protocol-core/group-messaging.md
"Receivers validate that the inner app event pubkey matches the Marmot
account identity authenticated by MLS"). Both the inner-id check (via deserializeApplicationData) and this pubkey binding are decode-layer rules;
a failure of either is invalid_encoding and the message MUST be dropped.
Parameters
data: Uint8Array
The serialized application payload (decrypted MLS bytes)
senderPubkeyHex: string
The MLS sender leaf's credential identity (lowercase
hex Nostr pubkey), NOT the MLS signature key.
Strict-decodes an application payload and binds its authorship to the MLS sender: the inner
pubkeyMUST equal the authenticated sender's Marmot account identity (foundation/identity.md,protocol-core/group-messaging.md"Receivers validate that the inner app eventpubkeymatches the Marmot account identity authenticated by MLS"). Both the inner-id check (via deserializeApplicationData) and this pubkey binding are decode-layer rules; a failure of either isinvalid_encodingand the message MUST be dropped.