security: harden signing-key lifecycle verification#2

Merged

Dynamicfeedai merged 4 commits into

mainfrom

codex/clean-signing-key-rotation

Jul 11, 2026

Commits on Jul 11, 2026

security: harden signing-key lifecycle verification

Sami Mechkor
authored and
Sami Mechkor
committed
security: reject malleable base64url signatures

Sami Mechkor
authored and
Sami Mechkor
committed
security: reject noncanonical JavaScript key encodings

Sami Mechkor
authored and
Sami Mechkor
committed
ci: test packaged verifier artifacts

Sami Mechkor
authored and
Sami Mechkor
committed