{
  "schema": "fate.signingKeys.v1",
  "statusRecordedAt": "2026-07-13T02:00:12Z",
  "policy": {
    "acceptSignaturesAfter": null,
    "silentHistoricalResigningAllowed": false,
    "replacementKeyStatus": "required"
  },
  "keys": [
    {
      "publicKeyHex": "dc9cfff4ac48c1e2c4425cf2c4026bd457b98494d93ba3cd451c976637c12e76",
      "status": "compromised",
      "signingEnabled": false,
      "trustRevokedAt": "2026-07-13T02:00:12Z",
      "firstObservedReceiptAt": "2026-06-27T04:14:38.459Z",
      "lastObservedReceiptAt": "2026-07-12T06:19:00Z",
      "reason": "Repeated Ed25519 R: 33 distinct prediction payloads share the same R value. Nonce reuse across distinct messages can expose the private signing scalar.",
      "legacyEvidencePolicy": "Preserve the original rows and timestamps, label them as cryptographically compromised, and never silently re-sign them as contemporaneous receipts."
    }
  ]
}