Get the evidence signing key
GET
/v1/public/trust/evidence-signing-keyGet the evidence signing key.
The Ed25519 public key that verifies evidence bundles. A reviewer who receives a bundle checks manifest.sig (base64) against the exact bytes of manifest.json with this key, and that key_id matches the one in the manifest; then each file's SHA-256 against the manifest. Fetch the key from here rather than trusting the copy inside the bundle. No credentials needed.
Errors: 404 when no signing key is configured on this deployment.
Authorization
None: this endpoint is public.
Responses
200application/json
key_idstringThe key id, the first 16 hex characters of the SHA-256 of the public key; the same id is in each bundle's manifest.
algorithmstringThe signature algorithm, always Ed25519.
public_key_pemstringThe public key, X.509 SubjectPublicKeyInfo in PEM encoding (what openssl reads).