Key policy

Current algorithm: Ed25519, keyId rvk_c2997e90215279c2, public key at /pubkey. Receipts carry keyId and signatureAlg, and are machine-verifiable under the active public key. Key rotation is explicit, versioned, and published BEFORE old keys retire; deprecated keys remain verifiable for historical receipts. Agents should reject receipts signed by unknown keys. Future hybrid/post-quantum signatures may be added under a new keyId and a future-compatible signatureSuite field (documented plan only — current receipts use ed25519 via keyId + signatureAlg). Trust margin: Raven documents what protects the receipt today; it does not promise indefinite cryptographic certainty. No claim that post-quantum migration is urgent; no claim that any cryptocurrency will break; no investment advice.