{
  "$comment": "Canonical KXCO platform post-quantum public key. Pin the kid to verify the platform identity. See https://chain.kxco.ai/developers/sdk for the verification flow.",
  "version": 1,
  "issuer": "KXCO by Knightsbridge Group",
  "issuerUrl": "https://kxco.ai",
  "algorithm": "ML-DSA-65",
  "spec": "NIST FIPS 204",
  "specUrl": "https://csrc.nist.gov/pubs/fips/204/final",
  "securityLevel": "NIST Category 3",
  "kid": "aa29f37ab7f4b2cf",
  "kidFormat": "first 8 bytes of SHA-256(publicKey), hex-encoded (16 hex chars)",
  "publicKey": "648b1e9b142ce625697fcd4d906f2ff0a76560c742e13418735ce9e8c484942fa4a6123490ee79aaabf157790e313506ecd580eb7a0253596bb51095923b5ca9afc82a1f1080dbbbe8b59cf4fe7bde680072e04ad5bf8db97e8b827698f0e35c622037fd617184695120c8379f1f4fec522fdbfb7bcafe0b875703b0726223486e8ce1050e761774045244824f9e61ae55b5a300fb588b9bad522721650cc0b67b489d93a996d023c154414a45f1d726cce5691b66ee348b5e9a3cb1cc38538100bed98508d77e3c8d18f668c40405631d846019c4de91a6c241cab69c041935a2fe121f698e145953498dce7a5cd42ee86abfacb6b5d6c59dc9826a798314d71e0b64c498a05e009da70a58fc377706e6ddf5c478d9e226829bd3c26290b2a81d75ff5916c6219282f75bcef838d22779c5bdbc37e0a99cd4132c3a51538308b54f60b832272ac515681d298367bf47dd8bad7770492550fe6c0c3dcea85101403fb10410cef81a0d3c94823a9326b7e3d703ebefd8215991c7d82a04d7f324dd0b0774a16f5f1a4137b3ceb3b7b49274e56dec0dd6af0ef5c44722e586142b393fdbb8b37bb0d3f65f474bc1e625d4533c23c7a54bb919a9fe81ac2fb9e09f255c406d0a00d55b185877408024ef1cff6b47778d68eb41db17ab39aa2f6d1bc48c1bce97fcc98ddf1e3811a6e847df33503dc0f726154fcf802aa375307a3d426adec3972f25534e81189ab741a6af95526e1fec0a26feb1a25e6a77d3f99e9e08525d4268eb1ea784c430698822be065c646e4f026f92b6f549eb822abb0b6e069da5d4b5d74bcb55b1e33ec88de47370cd61c6901d0689952c0892d764b026b24615bd397e5f0883c3af662f150fd8f82cc20b396aa7cf71914cb3b07481bef6ea14fdb151b722f029e51eace5b56abcffae96777a5da77c7907c903a7fc78110565d5b1b8814cb3cdb13d263b0842509323e11848c42bf40d82968c5b54b1db360846274f46c7be431f12530b50af5a3ace921e43443237ead3e2ea130408be29a465f42ac6d8ee4a8d612692d6626ad35fd1615437ecb0ee7c492b32c0f985a58d4c83860d4793d2c2067d8557fe7aed0edff71098a3b5e1d0f6d277442eac8c2bf9e9cb200fbc70956770661fc150c41345f192f93aaee2417b522a501145468db961fb152416fbac48a38233195ddc9ac971cd03b16059231ca5a3569d822ae79ccdd29c41db7e7420f6d4c33ceb516387d22492315c95980ba7b283fd1a488f6f6f3f63391db527da75004ab465134a7ad0fcbf703170f4b3eb2a883b3c09fb6efd25e7e051eb37ed2feca96d1fcc1bbbe43c1a535c117c27f72f8cbf30e22e870a2dc2dd1e3561a3413c1e3621c274016f9ae0dad619b6ce973f037f5d3cda0e9f242aa3ce9ebcf8d64d7c6e493dc02916ff870159321562032bd7df165470c3cdd9292319a7fdf9c327e6a3767b9b5e841b50322fd2e8f220a2bbba4d9f916e00666bf183592d783f0c648ab2d89d5d3df830b8f5140a4cd8108451612d7d9f2b57c61612ab79816966dfe9baa6974c91b93c74b096b9cc3d490756c3bef6c029962a14aa314ad2b1431ef61269a151bc25042f8e222d40650b6f181f20b6d268c467fe3df92ac21fe62720b69427b8e1b0257990937e9e5cb8da57a111eb432ee024238232f61e06cb64a55237258c861c5e6467f033516212d196fb4c05ca826608ca6afed3635ead33191caa0aca88f5fff2fd526a0277496e04f532aa44ee1d3b8fdaf5fce3b2ce5127c56db216b133e1ac2cf7d4e6c25dd10be950dfa02e1b608a8eb7ea9b434e8232a2d4c969c7d18da8eeec516a29f4c2fc2a42bf3b3b2e761a691438e7c7c755f0169027933b5afacaaa7ce91660c6c30801b47f340d3fad969c25be960649c4b8ef01a60de0a66875f1593e9f9caac3866f51dae1fd8e29163a3e8c5a2b5e1027b5d681c217b20e1a776b363d5fb9d8bd005a39c1c262a0a410e9562bcefe2277350d5a20d6fee04cbfae049fe0ae79c46a247948ad6b011c4b625e50569d013eac3818d543ad37a548212699505bd0450725434beb719b4a3d694ec8b62d4caf195c3eff2a3d5a85108b5e0f06e56aa8ffbd0538700c9a2fe908ee5fe7b916a137204114010566b585756c95ad7c57c22a390054a8fffaebaa737d26b00636a9ab7a2a9d4db206fff132741605c9eeaea24ef54374d23a743784d8807e17710033e9f0f8b2cbef557753f79daf12328de93f7d150325c217824d50ddb309e4bf63dc6ae282d4eddef4f10ddc0d3cf2e63d2e8ecb153093a8c46ce6d3b75733205ac6f672751b81903ebefef255697d98198f9448c2ab58048983adc161a1d8b62db933b9a5a493695c199f784c5ccfef3067a28514fba318e5c8d3f0585ca5b61bcd327474c2c666d767fa6b8c58b8bbb8c26e012a662882e28560bf357b7d8af8c1a170d007fbb23ef6b107b4ad6e44795738bb083d33dbcab6760fdc57925042d4b464a549d64182e50dfe28f670f1bb4dd705b19ce2572bf0244f517e3e455ba973591a1a647221af71ac95c7eb1da016bb1619d8f61c2dd7ff86b9d5fc2a1f991203fcabdd05a1fd737561e2de2e0c7d569ae98ae26cc98ca9ca6211d246f15b0bb64a594b988d7c7f12a8afae285bf5023d4af9acfc0ff9531f6384a5c94f83877f6905e92d6b4ec28b93a5695f68fb63948e6dd8227df8adb04cab50a022d53e15ef6805f4317fef0d1d2418",
  "publicKeyFormat": "hex",
  "publicKeyByteLength": 1952,
  "endpoints": {
    "verifyApi": "https://chain.kxco.ai/wallet/api/verify-demo",
    "verifyUI": "https://chain.kxco.ai/wallet/verify",
    "sdkDocs": "https://chain.kxco.ai/developers/sdk",
    "npm": "https://www.npmjs.com/package/kxco-post-quantum",
    "repo": "https://github.com/JackKXCO/kxco-post-quantum"
  },
  "rotation": {
    "policy": "Scheduled rotation at most quarterly. Emergency rotation on suspected compromise. Previous kids retained for verification of historical signatures.",
    "nextScheduled": null,
    "previousKids": []
  },
  "contact": {
    "general": "hello@kxco.ai",
    "security": "hello@kxco.ai"
  },
  "attestation": {
    "X-KXCO-PQ-Kid": "Webhook header containing the kid of the signing key",
    "X-KXCO-PQ-Signature": "Webhook header containing ml-dsa-65=<sig-hex>",
    "X-KXCO-Signature": "Webhook header containing sha256=<hmac-hex>",
    "X-KXCO-Timestamp": "Unix timestamp (seconds). Replay window enforced server-side."
  },
  "license": "MIT"
}