{
  "_note": "Public JWKS for verifying the KYE Protocol self-audit artefacts. Two key classes, both PUBLIC halves only. (1) ci-fixture: signs the committed snapshot triple under /trust/self-audit/ whose test counts are DERIVED from a real self-audit execution (no fixture default); its private half is a non-secret test-fixture key. (2) production: signs the LIVE bundles published by the kye-self-audit-daemon Worker at /trust/self-audit/live/<date>/ on its cron/handler; its private half is a Cloudflare Worker Secret (SELF_AUDIT_SIGNING_JWK) with HSM/KMS custody — NEVER committed, NEVER printed. Anyone can verify either class using the procedure documented at /trust/self-audit.html or `node scripts/verify-self-audit.mjs`. (3) crypto-agility-fixture: a REAL ML-DSA-65 (FIPS 204) post-quantum verification key demonstrating the crypto-agile JWKS posture of the KYE Cryptographic Authority Pack™ — a verifier picks the algorithm, so a hybrid Ed25519+ML-DSA seal stays verifiable after Ed25519 is deprecated. Its public half below is REAL (a genuine ML-DSA-65 keypair, not a placeholder); its private half is a documented NON-SECRET test-fixture (its derivation is recorded with the Pack, not a production secret). PRODUCTION ML-DSA signing (private half in Cloudflare Worker Secret / HSM custody, never committed) is the Phase-2 counterpart of the production Ed25519 key — this key proves crypto-agility readiness, it does not assert a live production ML-DSA signer yet. (4) authority-issuance-fixture: signs the records of KYE Protocol's OWN authority spine — the purpose manifests, authority grants and delegations that are the declared source of KYE's internal decision rights. Those records are DERIVED from KYE's canonical decision-rights registry by a generator and signed at the moment of issuance; they are never hand-authored, so a grant that verifies under this key is one that was issued rather than typed. Its private half is a NON-SECRET test-fixture key, exactly as with the ci-fixture self-audit key above; production issuance signs with a key whose private half lives in HSM/KMS custody and is NEVER committed. Verify a record by canonicalising it with its signature field removed and checking the detached Ed25519 signature against the public half below.",
  "keys": [
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "kye:key:self-audit-fixture-2026-06",
      "alg": "EdDSA",
      "use": "sig",
      "x": "N9v3DWpE0gZJVYD776dVubkoZZ9TnnKS94ZykiAE_Qw",
      "key_class": "ci-fixture"
    },
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "kye:key:self-audit-production-2026-06",
      "alg": "EdDSA",
      "use": "sig",
      "x": "D2EztMp7yKT7Qx_guoH1aZAjvsoj7mFsSsaBzOEM6lQ",
      "key_class": "production"
    },
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "kye:key:authority-risk-signal-fixture-2026-06",
      "alg": "EdDSA",
      "use": "sig",
      "x": "Zr5-Myx6RTMyvZ0Kf32wVfXF7xoGraZtmLOftoEMRzo",
      "key_class": "ci-fixture"
    },
    {
      "kty": "AKP",
      "alg": "ML-DSA-65",
      "kid": "kye:key:crypto-agility-mldsa65-fixture-2026-07",
      "use": "sig",
      "pub": "Ye4nHQtWNRxaa910VKYyY_EhjUsjt-pM27gJb9nYZHRQg-05mZYoocLmkcErVODuMMxsMW5jivjIn3ITzhPpc8g5gi2VUbF4jAr_2OEqrLNzrdZcOSdieUlquxQ766lYyflIyNbAvV8m-rQEgXtgOuRySGiqS-K31UnGYZrQYFZuYJOjGBJopABLSvgJNdKb0LxQOIMOm4fY0XM-jlB2EkErUrZ60Vfkk3GBlpYA76QEeZ98ozl5PWwVREmGaPsmc9AzwEtAxO7zMCCMwBChjW8Mue5jJROgG4vk6TZvyPJ_A865fjw_Vls4bUkzdDBY7FYmQKiF_aXIzpZo3XYLuLkuDvY_2Q2h0ZFSjL78sOwGpVeMyeEj8JmCNrFqqHjSHaEhddzck1E8tHibX4HJljE3n7ZcgETNMotomyqqgTeL_6G49V5LaZA673t8h-tF6y-jaL88H7Xve9V2FAWIsD742m0IOtTljchefjno4o1sqlrfvQXyH4tRyGeyZlmTqNCxZvkWf-i9iDgWjLDvChL6k1F3J0aZyYl3_eXxFxA89dRR6MKfpM42eK3j_SaijROiGqYmuLRwAP34rPYpq9_IL8t_RXwJWShi4h80uxol4XoAAvcvnJGxsD9Fc7Nqi8f99KtRUIfp1lHKEUGg_KOzXUTrdwtfv9V2vHujJPM5LXhvM_lxEZy6fVD5YV8jeqimGl_-fJrxM_QIByySSMVPVfqm8EYyl7IZDXwmlYyPpZeXZO1N8pI9TJKklo2FBP_S469xNOx289fAs-cHojzDKhEMEOgiXm9b-276lo3EkipojylOZLVuOIqRMNMAi6qkXZlck19zd5mVop4JlQOR_DtcCUeO4_Gt_rZMreDfRKacdK8akVMUZHZx-eVewnDZAel1Mt8liic6oFqQRv3D7_ihpIAmPmBPEHUVpsk4loZPbCHEp_mVkDzW4xeVjp4QXdmX4epZJ5WLTBLfmewifogko54L-mUOFCTKkM7xdjxXr7xdahLcKlxBfej1FDFhGuvWj8gekQTO71WT4ZAg6DaqIyjC9mkBzW1YwJZMo_dNKHl8cXmG7ayJ99bjeLTJRdSwHs3s3k_heHBt-FIGhOhnRUJ17YN5cqaSa_vojxiVQor3RfIV6RvCp7m3Mup6O2nOWjEK7eDXde4G6g_Mecf1S2GN347Rn8nXLu0ip9p5GcHi6b_znkKUP4C-dc0oqgBUCVAGPBoi3AZw3GoHpdqkyppHY13VeeE6uemghozXuL_0IDwbI5eU2LzJTOxO9-OL5dO-Q-vWUVDJ_y6nXzEvnzzmbTVQvFPhe_hujy2ggNY7LGH9jxe4nPHOTgvc03428siY47rQzTeCUps7T-qVKLhoaIdaFZQrVa3BVlgbnOHddrTdv9WVOpBGkbkSvIvXqIe384mhygQxm0UXlUjqVkpfs5rMj2sGPBwIzAF8z33dNCE0q7vF0zvuXFqEjpYFvuRx7OzFf2ey581OfAE1jVavVCSNff--LnlcryC_zCF7bZxeGmYLvxqr0DHKvAsxwyEfdWVVMNPS5L2qEGtb59dsR1u6uFzaozWXhnLQj-F4JrbFGM1soVZnRDFXXVi3_S8aeY562Zh5V3lnk33cD7OHPkK7ZujqiMd1qWXIIV5-jY0MLkBUqTPLt8x6zWjzDS5TH6s5Vi12DVrKkMoZ2xH3omS96Ssa8kNiZLSH0ErRbu1eOpG6OL9xSAV8YVyZTSHCb0DzSzwLnuzcf-TMwFt_IerGHdSxwhs018qk2xlr394e6ukSejOP2a35lBxVNk9OXgknAobwR8ldTHYGMwi12Fy_TF7JpmToo2hC4dtdZ_2ScjeesISZo3KIejjKNI9JY4ZdQZbIvOHKJ7GbDv8NrpEdk8Er_Z6QM8vPdcy2UDzp2btZ9hS77wgJp9US2jqtYDoyaiqu8hVpyrgBYz6YXK2Jy3nNSCvgITPG6DPLM1bUMOfqj_XILqQJyrNXOUbpO8t8DQ7_P_3e5-Gbz7OXu1h4bFS3fc3k_GqhNeqWPKTFbJ68dRtloKhEXDH7mifUMuCD37Vrg24frYgmN7OVde63jj5Rwknk6l6nPS4mwTXTVy1oQQSiHyWmL20gJmrXFbOUifS8AxNzNRDKLIxGOYZpaVDRNuQx6vu_bqEKiZaS3zAFXNq024cfpsC3BAdil29cQTZuO1DzFwWqoxZZw-3SQnOJDMj8bs9uWCpjEYrH4FZTf72MZPlrOh61C_q-mxxPAB2eqxC8xQyf3NmDNSHtmZ_iYAg-kxFRJNzp0eYneURSWpAzNJbfe6XoRFi1ZwDEwxjr8XJxWQ3MRA4ZfPVYd4HOvYNpAVkXwoTErwLbhw43KNL0qy9FQ_ovhVdIArQQZQACmDog1bNPkJwZq9_P0m3zwZ4xlF_VAF3RY5eNvon-ec4-KxWp3a_bZWrUVMb2kANT2fuqIyl3E3OfflnqeO5pSoEeAvZF_7yYBLjgooKstU3eQukDcLVzXM-r5EQv640hZ7tSi_Prr8Pz_eIfjVvAgwjP4VFCuIXdwEpTbp-fWbZPbfRmKCmJT_dnRL58GbgMOYjddq38OfXN_vZanQJgi3k",
      "key_class": "crypto-agility-fixture",
      "nist_fips": "FIPS 204"
    },
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "sha256:db45621ed8bbf4452",
      "alg": "EdDSA",
      "use": "sig",
      "x": "E8krnuk6Vlj7ASjyAOzdtVBZLeRNkWNdujItzSQ8fAA",
      "key_class": "production",
      "purpose": "kye-pdp decision-map signing (decision_map_jws, §13 Replay-Proof)",
      "worker": "kye:worker:kye-pdp",
      "published_at": "2026-08-02",
      "retention_note": "MUST remain published for the full 10-year evidence retention window (§30) even after rotation — every decision signed under this kid becomes unverifiable the moment it is removed."
    },
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "sha256:719b379d11266e045",
      "alg": "EdDSA",
      "use": "sig",
      "x": "V2q6a8JbDLjYKsVyvdtDZvwKZ2uVsqEP2za0UW7Ymms",
      "key_class": "production",
      "purpose": "kye-pdp decision-map signing (decision_map_jws, §13 Replay-Proof) — ACTIVE deployed key",
      "worker": "kye:worker:kye-pdp",
      "published_at": "2026-08-03",
      "retention_note": "The currently-deployed kye-pdp decision-map signing key: its Ed25519 seed is bound as the PDP_SIGNING_KEY_SEED_HEX Cloudflare Worker secret (private half never committed; kid = stableHash(seedHex)[:24], the exact value the Worker computes). MUST remain published for the full 10-year evidence retention window (§30) even after rotation — every decision signed under this kid becomes unverifiable the moment it is removed."
    },
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "kye:key:authority-issuance-fixture-2026-08",
      "alg": "EdDSA",
      "use": "sig",
      "x": "DbqPn0A-SCRnHnvllju2-WOpgyCuLNOsZOwlv_yqtCY",
      "key_class": "ci-fixture"
    },
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "kye:key:sandbox-replay-demo-fixture-2026-08",
      "alg": "EdDSA",
      "use": "sig",
      "x": "a37_k0qHo5RqkQ-YpDkVmcKR2XsE1xlwx7bfkkBAmcU",
      "key_class": "ci-fixture",
      "purpose": "Verifies the sealed decision-maps in the sandbox offline replay-proof demo (public/sandbox/replay-side-by-side.html). Its Ed25519 seed is a documented NON-SECRET fixture in scripts/build-replay-demo-data.mjs; NOT a production signer — production decisions are signed by keys whose private halves live in HSM/KMS custody and are never committed.",
      "published_at": "2026-08-30"
    },
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "x": "ow_ANB7CaN_1ZvSAGA0NsHk4Uo_EgeyZSJ-2ogPeIN4",
      "kid": "kye:key:selfgov-fixture-2026-09",
      "use": "sig",
      "alg": "EdDSA",
      "key_class": "ci-fixture",
      "purpose": "Verifies the KYE self-governance run bundle (manifest, artefacts, transparency-chain entry). Non-secret committed fixture; the production peer signs under HSM/KMS custody."
    },
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "x": "rvDhsDaVuf3OqEY35YT7PMGcgQAqwSgUbJlgZrvIpgU",
      "kid": "kye:key:compliance-attestation-fixture-2026-09",
      "alg": "EdDSA",
      "use": "sig",
      "key_class": "ci-fixture"
    }
  ]
}