// Package signfixture exposes producer signing only for synthetic consumer tests.
// Callers supply test keys; this package contains no credentials or runtime signer.
package signfixture

import (
	"crypto/ed25519"
	"github.com/netkingdom/access-engine/internal/sign"
	"github.com/netkingdom/access-engine/pkg/api"
)

// Sign uses the unchanged producer envelope format with a caller-owned fixture key.
func Sign(envelope *api.DecisionEnvelope, key ed25519.PrivateKey, kid string) error {
	return sign.Sign(envelope, key, kid)
}