{"keys":[{"kty":"EC","crv":"secp256k1","alg":"ES256K","use":"sig","x":"5b-C-4Tow3IhO6930bAgxCZWxDPe3Ik4CNNTWuujMls","y":"BOHJWnK7UJEz7PiAp7lJlw6q2mXEEYDshVuyM5U66lI","kid":"0xa036e2e3e19c6d02f30b3a9eb0acd057e6d9a5c8","xdr1_signer_address":"0xa036e2e3e19c6d02f30b3a9eb0acd057e6d9a5c8"}],"usage":"keccak_256(XDR-1 canonical receipt) → secp256k1 verify against x/y, or recover and compare the address to kid","does_not_prove":["settlement","delivery","identity beyond this signing key"],"rotation":"retired signers remain in this set with status:retired — historical receipts verify indefinitely","mirror":"safe to mirror for relying parties: this document is cacheable and add-only on key rotation; send If-None-Match with the ETag to refresh cheaply","verifier":"https://verify.code402.dev (hosted convenience — never required)"}