{"format":"forge-keys/1","origin":"https://theagentforge.io","keys":[{"kid":"forge-513c7bfa80eebdd0","kty":"OKP","crv":"Ed25519","x":"iL-HFhCMJJ0OcgiSP-Eto7_YNoNxZknVfXuZj26OBnA","use":"sig","status":"current","from":"2026-10-28","retired":null}],"rotation":["Every v2 replay seal names its key by key_id. Verify it with the key of that id in this set.","Exactly one key is current; only the current key signs new replays.","A rotated key stays in this set as retired, with the date it stopped signing, and is never removed, so older replays keep verifying.","A key id is never reused.","If a key is ever known to be compromised, it stays listed with status retired and the date, and the incident is published at /status.","Runs finished before replay format v2 (forge-replay/1) carry an HMAC-SHA256 signature only The Forge can check; they verify by that signature only, shown on each run page."]}