Process and evidence integrity
Decision Passport · 4
Keys and key history
Passports are signed with Ed25519. Verifiers trust only pinned keys: the list below, committed in the repository and shipped with the offline verifier. The key a bundle carries is informational and never trusted on its own.
1.Pinned production key
| Key id | Public key (x, base64url) | Status | Valid from | Valid to |
|---|---|---|---|---|
ed25519-e31c2d82da92a114 | HLvxNqISBr_AJlCdpAPCYcvUYH0qRaqte0cyeabuEWs | active | 2026-10-20T21:30:00Z | open |
Download pinned keys (JSON)Live key documentPinned file in the repository
This deployment: signing with ed25519-e31c2d82da92a114. Compare the live key document over HTTPS with the pinned file; they must agree.
2.Key history
Every key that has ever signed passports, never removed. Retired keys keep their window so earlier passports keep verifying; revoked keys stay listed so their signatures are recognised as untrusted.
| Key id | Status | Window | Revoked |
|---|---|---|---|
ed25519-e31c2d82da92a114 | active | 2026-10-20T21:30:00Z to open | — |
No key has been rotated, retired or revoked so far.
3.Key management procedure
From the Passport Policy, am-passport-policy/1.0.0.
- Passports are signed with Ed25519. The private key exists only as a sensitive server environment variable of the production deployment; it is never logged, returned, committed or available to previews.
- Public keys are published at /.well-known/abrahammoses-passport-keys.json and pinned in the offline verifier. A key id is derived from the public key (ed25519- + the first 16 hex digits of its SHA-256).
- Rotation: the outgoing key is listed as retired with its validity window and is never removed, so earlier passports keep verifying; the new key starts a new window.
- Compromise: the key is listed as revoked with the time of revocation; signatures by it are then rejected by every verifier, and affected passports are re-issued under a new key.
Disclaimer. A passport attests to process and evidence integrity, not legal correctness. It is not legal advice, not a qualified electronic signature or seal, and not a certification; no regulatory approval is claimed.