feat(evidence): harden Evidence and Mint key management - #655

Merged

jeremi merged 7 commits into

mainfrom

codex/key-management-hardening

Aug 6, 2026

Commits on Aug 6, 2026

feat(evidence): harden Evidence and Mint key management
jeremi
committed
241d1e0
fix(evidence): publish local Mint key by thumbprint
jeremi
committed
2cbac85
feat(evidence): align client with hardened service keys
jeremi
committed
d3cd462
fix(evidence): refuse a verification policy outside its contract bounds
jeremi
committed
193edef
fix(evidence): keep Transit out of portable verifier
jeremi
committed
2b1c3dd
fix(evidence): enforce verification policy list bounds
jeremi
committed
6830aee
docs(evidence): complete signing rotation guidance
jeremi
committed
da1655d