{
  "about": "Detached signatures by incident.identity@web-summit.dinis over the files that say what is safe here (ECDSA P-256 over the file bytes, as sgit pki sign). Check: node tools/lane-sign.mjs --check. A signature says who signed the bytes, not that they are right.",
  "by": "incident.identity@web-summit.dinis",
  "updated": "2026-11-11T10:23:01.993Z",
  "signed": [
    {
      "file": "SECURITY.md",
      "sha256": "f5fa4cc1553c0603e185711521c36c179b6c8e922421450df37bdbe69a2bf050",
      "signature": "neohPMZS/VpEB5L+XJdkuB+rytU/AwTMoXVurjtKLs9tPVCqLxJyqLcDxNVljizn0Y3NInpxwwlni032yD9GIg==",
      "fingerprint": "sha256:4576d54b573c363f"
    },
    {
      "file": "app/login/pki/PIN.json",
      "sha256": "d93100940a58a4d6220b2699c3f72b31ea8bfbc3086c4b92af96b80972b71f0c",
      "signature": "OplCpCsLRphRWCWbVdMOOWUs/XW9nfGAP8anK1Hfbjc/ksNw++tGc6/itD1YLxR46LLTO8GCwvDXE1DZd3sLyg==",
      "fingerprint": "sha256:4576d54b573c363f"
    },
    {
      "file": "data/lanes.json",
      "sha256": "c914589fbde8b6a4a3ceb95950ae89f7227025dc5a00c6697e2bd398b07bdeb4",
      "signature": "m3UflZUFwRR426wn0vfM845EGe8KV2r6DTtNIEzHKDO0EIc/gYB2QLjaR452Di7kPj1Lw/152C1vIifLGhxl4w==",
      "fingerprint": "sha256:4576d54b573c363f"
    }
  ]
}