{"alg":"Ed25519","use":"sentinel-analyze-response-signing","public_key_b64":"Cu3MSfDaI48RnLLXEmRIdPN6zwCS6rFNmrHOYbM8XNY=","key_id":"24653ea7b563d08f","key_version":"v1","key_activated_at":"","custody_model":"environment-injected secret","canonical_format":"json.dumps(payload, sort_keys=True, separators=(\",\", \":\"))","signed_fields":["timestamp","agent_id","command","decision","risk","reason","risk_score","policy_version","vt","reputation_before","reputation_after","audit_id","action_digest","ledger_id","replay_id","replay_url","evidence_url","security_score","webhook_fired","webhook_status","review_action_id","review_response_deadline_ts","review_timeout_outcome","decision_digest"],"signature_encoding":"base64","verification_note":"Verify the /analyze signature over only the signed_fields object, excluding the signature field.","verifier_script_url":"https://sentinelsca.com/.well-known/sentinel-response-verifier.py"}