{
  "issuer": "Sealed (seal.epochpay.today) · EpochCore LLC",
  "updated_at": "2026-05-12",
  "keys": [
    {
      "kid": "5D579BC434FE1EE7",
      "alg": "Ed25519",
      "use": "directive_seal_classical",
      "description": "Classical Ed25519 signature over the canonical SHA-256 of every sealed event.",
      "rotation": "Annual; older keys remain verifiable forever via chain links."
    },
    {
      "kid": "00A1B445B44906C3",
      "alg": "ML-DSA-87",
      "spec": "NIST FIPS 204",
      "use": "directive_seal_postquantum",
      "description": "Post-quantum lattice signature. Dual-signed alongside Ed25519 on every sealed event so receipts remain verifiable even if Ed25519 is broken by future cryptanalysis.",
      "rotation": "Annual; older keys remain verifiable forever via chain links."
    }
  ],
  "verification_endpoint": "https://chain.epochcoreqcs.com/v1/verify",
  "policy": "https://seal.epochpay.today/security",
  "report_vulnerability": "https://seal.epochpay.today/security/report"
}