Settings

Trust-anchor config · multi-tenant management · alerting thresholds

Ed25519 trust anchor

The single key under which every L12 entry is signed.

● production

Public key (base64, 32 bytes)

y6F3rt10CEcSakCrnJIYkGymA66x3VXm0zCWbPjRxP8=

Algorithm

ed25519 (RFC 8032)

Canonical form

v1

Generated

2026-04-08 · air-gapped Tails environment

Backup

Shamir 3-of-5 · 5 custodians · last rehearsal 2026-04-22

Signing path

Mode

in-memory (v1.2 default)

HSM target (v1.3 roadmap)

v1.2 signs with an in-memory seed. v1.3 ships native HSM-injection via signerFn on signCanonical. Today, operators needing HSM patch the function locally — one-function diff documented in OPERATIONS_RUNTIME_AI.md §3.

Rotation

Ed25519 keys don't need rotation cryptographically. Rotate on policy events (custodian change, suspected compromise, post- incident hygiene). Rotation uses chained co-signing: the rotation entry is signed by both old + new keys; verifier accepts either for entries id ≤ rotation.id, only the new key after.