{
  "algo": "Ed25519",
  "authorship_public_key_spki_hex": "302a300506032b65700321009fb386747240d559162d848f68fa9bd61352e24668d2df4758e7f1216bb4d006",
  "gate_public_key_spki_hex": "302a300506032b6570032100ef9b836a60ce296ec3f9bfbd5cb1ddf5ce04f5444cd867a3e25b83311f8b667a",
  "note": "Verify both signatures over the canonical manifest hash. Private halves live in SSM, never in the repo."
}