RootHerald.Native (P/Invoke wrapper)

dotnet add package RootHerald.Native --version 1.0.0-preview.1

using RootHerald;

public partial class LauncherWindow : Window
{
    private readonly RootHeraldClient _herald;

    public LauncherWindow()
    {
        InitializeComponent();
        // Keyless: no api_key, no endpoint — nothing to connect to.
        _herald = new RootHeraldClient();
        _herald.SetApplicationId("com.acme.launcher");
    }

    private async void OnPlay_Click(object sender, RoutedEventArgs e)
    {
        try
        {
            // 1. Ask YOUR backend for a fresh challenge nonce (it called
            //    POST /api/v1/attestations/challenge with its rh_sk_ secret).
            string nonce = await MyBackend.GetChallengeNonceAsync();

            // 2. Collect a quote-over-nonce evidence blob locally. Keyless, no network.
            string evidenceJson = await _herald.CollectEvidenceAsync(nonce);

            // 3. Relay the blob to your backend, which POSTs it to /attestations/verify
            //    and returns whether the device was trusted.
            var launch = await MyBackend.VerifyAndAuthorizeLaunchAsync(evidenceJson);
            if (!launch.Allowed)
            {
                MessageBox.Show($"Device not trusted: {launch.Reason}");
                return;
            }
            LaunchGame(launch.DeviceId);
        }
        catch (RootHeraldException ex)
        {
            MessageBox.Show($"Evidence collection failed (status={ex.NativeStatus}): {ex.Message}");
        }
    }

    protected override void OnClosed(EventArgs e)
    {
        _herald.Dispose();
        base.OnClosed(e);
    }
}