{
    "schema": "clariodb-trust-public-key",
    "version": 2,
    "published_for_release": "0.9.72",
    "state": "configured",
    "algorithm": "Ed25519",
    "key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
    "public_key_base64": "kCXiiVuXa26IB0ANa31767FV2X1yfV6CwjoTjUDmFfo=",
    "report_url": "https://clariodb.net/trust-attestation.json",
    "signed_field": "sha256",
    "boundary": "The key endpoint publishes the current server key; pin its key_id through an independent channel for identity continuity.",
    "continuity": {
        "state": "genesis",
        "ok": true,
        "genesis_key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
        "pinned_key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
        "current_key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
        "first_seen_at": "2026-09-02T06:57:10Z",
        "current_since": "2026-09-02T06:57:10Z",
        "rotation_sequence": 0,
        "history_url": "https://clariodb.net/trust-key-history.json",
        "root_pin_url": "https://clariodb.net/trust-root.json"
    },
    "ledger_url": "https://clariodb.net/trust-ledger.json",
    "status_url": "https://clariodb.net/trust-status.json",
    "dns_pin": {
        "state": "not_configured",
        "required": false,
        "name": null,
        "expected_value": "v=clariodb-trust1; key-id=ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
        "ok": false,
        "observed_at": null,
        "instruction": "Publish the expected TXT value through an independently controlled DNS zone, then configure CLARIODB_TRUST_DNS_NAME."
    }
}