{
  "_about": "Polly install provenance anchor. Published by Preterite over HTTPS at https://verify.preterite.io/polly/provenance.json and mirrored in a public Codeberg repo (mirror_repo_raw below). Verify install material against THIS, fetched yourself. Fetch both copies and confirm they are identical — two independent sources agreeing is the check.",
  "published_by": "Preterite",
  "contact": "noah@preterite.io",
  "last_updated": "2026-06-17",
  "rotation_note": "The keys and fingerprints below change only on key rotation, which is announced here with a new last_updated date. A silent change is a red flag — confirm out of band with your Preterite contact before trusting it.",
  "repos": {
    "core": "ssh://git@codeberg.org/yablid/polly-core.git",
    "per_user_pattern": "ssh://git@codeberg.org/yablid/polly-<operator>.git"
  },
  "signing_key": {
    "type": "ssh-ed25519",
    "key": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID3cLZkpUJrbKwGQKj9iZASy+6Zib37bk7DYuLl92X0n polly-release-signing",
    "fingerprint": "SHA256:ceSVoq840BRZF8+VN9jKQiK6j/9IYmYZYO51nKq6ZfY",
    "principal": "preterite@users.noreply.codeberg.org",
    "note": "Core release tags are SSH-signed with this key. Run 'git verify-tag' against it before executing any workspace code."
  },
  "codeberg_host_key_fingerprints": {
    "ed25519": "SHA256:mIlxA9k46MmM6qdJOdMnAQpzGxF4WIVVL+fj+wZbw0g",
    "rsa": "SHA256:6QQmYi4ppFS4/+zSZ5S4IU+4sa6rwvQ4PbhCtPEBekQ",
    "ecdsa": "SHA256:T9FYDEHELhVkulEKKwge5aVhVTbqCW0MIRwAfpARs/E"
  },
  "codeberg_known_hosts_url": "https://verify.preterite.io/polly/codeberg_known_hosts",
  "mirror_repo": "https://codeberg.org/yablid/polly-provenance",
  "mirror_repo_raw": "https://codeberg.org/yablid/polly-provenance/raw/branch/main/public/polly/provenance.json"
}