Receipt keys

Receipt Keys

The platform's receipt signing keys: the active one and any retired ones still needed to check older receipts. Public; a verifier caches it. Node keys are not listed here: each node receipt carries its own public key, and the gateway's countersignature states whether it matches the node's attestation.

The platform's receipt signing keys, public and cacheable for five minutes. A retired key keeps its not_after, the time it stopped signing.

{
  "object": "list",
  "keys": [
    { "key_id": "rk_...", "alg": "ed25519", "public_key": "<base64>", "status": "active", "not_after": null }
  ]
}

Responses: 200 Successful Response

Receipt Keys Well Known

The same list as GET /v1/receipts/keys.

Responses: 200 Successful Response