Resolve a napplet end-to-end from a candidate manifest event: verify the
signature, parse the manifest, verify the NIP-5A aggregate, fetch and verify
every blob, then assemble the verified /index.html.
The returned (dTag, aggregateHash) is computed from the verified bytes and
is the napplet's identity. Any failure throws a NappletResolutionError
— the caller must fail closed (never render unverified bytes).
Resolve a napplet end-to-end from a candidate manifest event: verify the signature, parse the manifest, verify the NIP-5A aggregate, fetch and verify every blob, then assemble the verified
/index.html.The returned
(dTag, aggregateHash)is computed from the verified bytes and is the napplet's identity. Any failure throws a NappletResolutionError — the caller must fail closed (never render unverified bytes).