{
  "keys": [],
  "_meta": {
    "schema": "RFC 7517 (JSON Web Key Set)",
    "purpose": "Public attestation keys of SWORN trusted scorers, for off-chain signature verification of attestations issued through POST /api/v1/score-ingestion.",
    "current_scorers_listed": 1,
    "scorer_keys_published": 0,
    "scorers_doc": "https://sworn.chitacloud.dev/TRUSTED-SCORERS.md",
    "activation_doc": "https://sworn.chitacloud.dev/TRUSTED-SCORERS.md#activation-two-options",
    "key_format_expected_per_scorer": {
      "kty": "OKP | EC",
      "crv": "Ed25519 (Solana-native, recommended) | secp256k1 (EVM-native, accepted)",
      "alg": "EdDSA | ES256K",
      "use": "sig",
      "kid": "scorer-<scorer_id>",
      "x5c_or_x": "base64url-encoded pubkey",
      "scorer_id": "uint, on-chain registry id",
      "scorer_label": "human-readable agent name"
    },
    "policy": "A scorer activation per /TRUSTED-SCORERS.md does NOT require pubkey publication; on-chain attestations remain verifiable via Solana mainnet-beta directly. Pubkey publication here is optional and serves verifiers who want to verify off-chain signatures (e.g., the multi-attestation array model converging across CTEF / A2A / AgentID / HiveTrust / ERC-8004) without an RPC roundtrip.",
    "last_updated": "2026-04-25",
    "schema_version": "0.1.0"
  }
}
