Feature: Certificate Writes and Native X.509 Bridge

[sephynox]

Summary

The SDK could read published certificates but not publish or retire them, which blocked porting the examples repo off its hand-written interop layer. This adds the MANAGE_CERTIFICATE operations to the block surface and a bridge between core certificates and System.Security.Cryptography.X509Certificates.

Related Issues

• Refactor: Move Provider Operations onto Provider Handles #14
• Feature: Ledger Reads, Builder Publishing, and Network Presets #13
• Feature: Basic Network Operations #12
• Feature: Signer-Bound UserClient #11
• Feature: Block Building and Fee-Aware Transmit #10
• Feature: Base Updates from anchor-rs v0.4.0 #9

Changes Made

• UserClient.ModifyCertificate publishes a certificate with its bundle or retires it by hash
• BlockFactory builds MANAGE_CERTIFICATE add and remove operations
• Certificate.ToX509Certificate() and KycCertificate.ToX509Certificate() expose the native .NET view
• Certificates.Parse(X509Certificate2) adopts a native certificate into the core
• Node harness gains issueChain so tests publish reference-issued CA bundles

Testing

• make test: passes

Breaking Changes

None

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
91.2% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud