{
    "schema": "clariodb-trust-root-pin",
    "version": 1,
    "created_at": "2026-09-02T06:57:10Z",
    "origin": "https://clariodb.net",
    "genesis_key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
    "genesis_public_key_base64": "kCXiiVuXa26IB0ANa31767FV2X1yfV6CwjoTjUDmFfo=",
    "instructions": "Store this document outside the ClarioDB host and use it as the immutable root pin when verifying future key history.",
    "boundary": "This root is self-issued by the genesis key. Independent retention is required to detect complete host replacement.",
    "sha256": "sha256:3ad76c6529476a155aa1e9416b77696035d00c11c44a386156287dd0c8005011",
    "attestation": {
        "state": "signed",
        "algorithm": "Ed25519",
        "signature_format": "clariodb-trust-document-signature/1",
        "signed_field": "signature_input",
        "signature_input": {
            "schema": "clariodb-trust-document-signature-input",
            "version": 1,
            "document_schema": "clariodb-trust-root-pin",
            "document_version": 1,
            "sha256": "sha256:3ad76c6529476a155aa1e9416b77696035d00c11c44a386156287dd0c8005011"
        },
        "key_id": "ed25519-sha256:a21c7ee5084c9b9d89bd02e366bfede82d87fb2d26408cf5926a7f88f6aad692",
        "public_key_base64": "kCXiiVuXa26IB0ANa31767FV2X1yfV6CwjoTjUDmFfo=",
        "signature_base64": "UnSfjLmlMPxmBun/IJ/6ZVYPhlu6iV7u1jnJTfNRV5kFB2KZUNTT5+gAvoDxB3yDn/gsOuwhgIMdxIsaeJtIAA=="
    }
}