bug: inline attestation was not resolving keys in crates/atproto-attestation/src/bin/atproto-attestation-verify.rs

crates/atproto-attestation/src/bin/atproto-attestation-verify.rs

···
 
 use anyhow::{Context, Result, anyhow};
 use atproto_attestation::AnyInput;
-use atproto_identity::key::{KeyData, KeyResolver};
+use atproto_identity::key::{KeyData, KeyResolver, identify_key};
 use clap::Parser;
 use serde_json::Value;
 use std::{
···
     attestation: Option<String>,
 }
 
-struct FakeKeyResolver {}
+/// A key resolver that supports `did:key:` identifiers directly.
+///
+/// This resolver handles key references that are encoded as `did:key:` strings,
+/// parsing them to extract the cryptographic key data. For other DID methods,
+/// it returns an error since those would require fetching DID documents.
+struct DidKeyResolver {}
 
 #[async_trait::async_trait]
-impl KeyResolver for FakeKeyResolver {
-    async fn resolve(&self, _subject: &str) -> Result<KeyData> {
-        todo!()
+impl KeyResolver for DidKeyResolver {
+    async fn resolve(&self, subject: &str) -> Result<KeyData> {
+        if subject.starts_with("did:key:") {
+            identify_key(subject)
+                .map_err(|e| anyhow!("Failed to parse did:key '{}': {}", subject, e))
+        } else {
+            Err(anyhow!(
+                "Subject '{}' is not a did:key: identifier. Only did:key: subjects are supported by this resolver.",
+                subject
+            ))
+        }
     }
 }
 
···
         identity_resolver,
     };
 
-    let key_resolver = FakeKeyResolver {};
+    let key_resolver = DidKeyResolver {};
 
     atproto_attestation::verify_record(
         AnyInput::Serialize(record.clone()),