Signatures

Public key history

ACF® treats its root of trust as a public obligation. Every rotation is announced here, dated, and tied to the explicit acf-mcp version it applies to.

!Warning

A root rotation does not invalidate prior versions. An output produced with doctrine_version < 1.1.0 remains verifiable against its original key. This page is the official index of active keys per version range.

Current key (1.1.0+)

Issued on June 14, 2026. Generated and controlled directly by Vincent Dorange; the private key is held off-line. Every acf-mcp output from version 1.1.0 onward verifies against this key.

acf-doctrine-pubkey-v2.txttext

MCowBQYDK2VwAyEAojtKfh20SGGV63LMETjZBXRWo2tY0viAYziG/y3/L0s=

Legacy key (1.0.x)

Versions 1.0.0 → 1.0.3 were signed with an earlier root generated during server bootstrap. Outputs from that era remain verifiable against their original key, which is embedded in the doctrine_public_key field of each. The rotation to the current key is a forward-only root change, not a retroactive revocation.

To verify a 1.0.x output, read the key directly from the output’s doctrine_public_key field — that is the only authoritative source for that era.

Rotation policy

A rotation is declared at minor bumps (1.1.0, 1.2.0, …), never at patch level.
CHANGELOG.md documents the motivation behind every rotation.
The private key is held offline in a vault under direct control of the ACF® publisher (Vincent Dorange).
On suspected compromise, this page is updated within 24 h; an emergency rotation ships within 72 h.