Post-quantum seal verification: ML-DSA-65 hybrid signatures, signed keyring custody, and a pinned trust root.
- ML-DSA-65 and hybrid Ed25519+ML-DSA-65 browser seal verification.
- FIPS-204 cross-language parity gate for the ML-DSA implementation.
- Signed pinned-keyring custody with hybrid key ingestion.
- The studio trust root pinned in the shell; the signed keyring ships at /.well-known/.