docs: cite platform-ceremonies 4.1 for the attested-data bytes

src/jwks/mod.rs

@@ -20,10 +20,10 @@
 //! The entry point is [`prover::notarize_jwks`]: it runs the MPC-TLS prover
 //! against a live notary over any async socket and reads the record back.
 
-/// The record as the notary hands it back: the section 9.1 attested data and
-/// the notary's signature over it, and nothing else. An alias of
-/// libid-transcript's wire struct, so the keeper and the notary agree on the
-/// frame by construction.
+/// The record as the notary hands it back: the platform-ceremonies
+/// section 4.1 attested data and the notary's signature over it, and nothing
+/// else. An alias of libid-transcript's wire struct, so the keeper and the
+/// notary agree on the frame by construction.
 pub type NotarizedSession = libid_transcript::AttestationWire;
 
 /// Errors from building or obtaining a JWKS reading.

src/proof.rs

@@ -1,9 +1,9 @@
 //! Obtaining a [`NotarizedSession`] — the notarized reading of Google's JWKS:
 //! an MPC-TLS session against a running libid notary's TCP wire port, driven
 //! by this crate's own prover-side helpers
-//! ([`crate::jwks::prover::notarize_jwks`]). What comes back is the section
-//! 9.1 bytes and the notary's signature over them — exactly what
-//! `GoogleJwtRoots.rotate` takes.
+//! ([`crate::jwks::prover::notarize_jwks`]). What comes back is the
+//! platform-ceremonies section 4.1 bytes and the notary's signature over
+//! them — exactly what `GoogleJwtRoots.rotate` takes.
 
 use crate::jwks::NotarizedSession;
 use anyhow::{

tests/e2e_real.rs

@@ -137,8 +137,8 @@ struct DeclaredContracts {
     notary_service: Address,
 }
 
-/// The notary's `createdAt`: bytes 32..40 of the section 9.1 record,
-/// big-endian, right after the 32-byte authority id.
+/// The notary's `createdAt`: bytes 32..40 of the platform-ceremonies
+/// section 4.1 record, big-endian, right after the 32-byte authority id.
 fn created_at(attested_data: &[u8]) -> u64 {
     u64::from_be_bytes(attested_data[32..40].try_into().unwrap())
 }