{
 "_doc": "Pinned signer keys for verify.py — PUBLIC keys only. A verifier should confirm these fingerprints out of band (README 'Trust'), not only from this file: whoever controls this repo could swap it. jake_forge_l1 = forge's C08 bridge node key (minted on forge 2026-07-20, never left it); it signs every forge-written row, every anchor and every signed tree head. principals = desk keys that co-sign rows they wrote. Rotation = the new key is added here in a commit whose row/checkpoint is signed by the old key, before the first row the new key signs. Mirror of operations_jake.aDNA what/lannes_chat/oplog_trust.json.",
 "jake_forge_l1": {
  "signer_pubkey": "4fae37fb85ea405d2b5c6475bd5d859e64f4af75388977191c89703c4ce7aacc",
  "key_fingerprint": "ed4731d614925428",
  "pinned": "2026-09-30",
  "source": "bridge ledger jake_forge_l1 TASK_* payload.signer_pubkey (50 events, sig-OK)"
 },
 "principals": {
  "_doc": "Agent/desk keys that co-sign rows they wrote (oplog_sign.cosign). Same bridge agent-key registry principals (~/.config/operations-bridge/agent-keys.toml, Jake's hand); pinned here for the record's own verify.",
  "forge-lannes-desk": {
   "signer_pubkey": "6acaca09631597d810a5c95bb89a641b35f45c50fd5a22b1848a6397466d6011",
   "key_fingerprint": "e9c9569ced962344",
   "pinned": "2026-09-30",
   "purpose": "Lannes desk card claims/releases through the C08 bridge (desk + Berthier lane), distinct from the executor forge-claude-code",
   "source": "coord_2026_09_30_desk_key_ceremony.md (minted on forge via operations-bridge agent-key keygen)"
  }
 },
 "attesters": {
  "_doc": "Source-attestation keys: a node that SUBMITS rows signs them with its own key (row field `attest`, ailedger-attest-1). A namespace apart from node keys. Pinned in a commit before the first attested row. Mirror of oplog_trust.json attesters.",
  "jake_lemur_l1": {
   "signer_pubkey": "f9fd2b1e67bc53c0ecf71de20eada82ee3c44e2df4dabd179c6d081182a2928d",
   "key_fingerprint": "89dcd89e463c7589",
   "pinned": "2026-09-30",
   "purpose": "Jake's terminal (lemur): lannes-log signs each entry it ships to forge",
   "source": "minted on lemur 2026-09-30T23:10:56Z, never leaves lemur"
  }
 }
}