KES validation #199
Description
Validate the KES signature in the block header, using the issuer_vkey to look up the SPO and find their latest opcert. There should be support for this in Pallas real soon now - check with Pavo.
On either success or failure it should generate a ValidationResult message (TBD) on "cardano.validation.kes".
There may be support in pallas, or coming soon, that supports the crypto part. We'll need to query the state to get the SPO's KES, validate, and generate a go/no-go in flight control.
We also need to validate the opcert against the permanent KES key