{
  "schema": "hummbl.governance-keys.v0",
  "note": "Public key registry for verifying signed governance evidence artifacts. Private keys are never published — the signing seed lives in the GOVERNANCE_SIGNING_KEY repo secret. Public keys only.",
  "keys": [
    {
      "key_id": "governance-ci",
      "algorithm": "Ed25519",
      "usage": "signing",
      "status": "pending-provisioning",
      "public_key": null,
      "comment": "Populated when the operator provisions GOVERNANCE_SIGNING_KEY and publishes its public half here."
    },
    {
      "key_id": "governance-ci-test",
      "algorithm": "Ed25519",
      "usage": "signing",
      "status": "test-fixture",
      "public_key": "AsnBSaaE4aG4tqwVyvBrHk0wu0+zJQPR5jUuimW+3fI=",
      "comment": "Fixture-only key matching scripts/governance_gates/fixtures/. Never used for real evidence."
    }
  ]
}