{"canonical":"https://vermarco.ai/.well-known/ecosystem.json","keys":[{"key_id":"vm-eco-2026-09","public_key":"6x5QiOOi4WHxk9Z8K9zaobhpL0TkHG3Irp591wr7/7A=","alg":"Ed25519","member":"vermarco","valid_from":"2026-09-15T00:00:00Z","valid_until":"2027-03-31T00:00:00Z","status":"active"}],"note":"Trust root for the ecosystem manifest signer. Pin these keys out-of-band; a fetched key document is corroboration, not authority. A retired key verifies nothing, even a pulse still inside its own lifetime."}