# Public key(s) the production build trusts to sign offline license files.
#
# Put the production license server's OFFLINE_PUBLIC_KEY here, one base64 Ed25519 public key per line (or
# comma separated). The same value is served publicly at https://license.cerebion.com/api/config as
# "offline_public_key". It is a PUBLIC key and safe to commit. When the server's signing key is rotated, keep the
# old key next to the new one for as long as offline license files signed with either are in use.
#
# scripts/build_with_obfuscation.py stamps these keys into the production build and stops if none is listed.
# The repository's test key is refused: its private key is public, so anyone could sign a license it accepts.
#
# Rotated 2026-09-28: the production server had been signing with this repo's own test keypair since initial
# setup -- there was never a second, separate production key before this one. No real customer had used
# offline/air-gapped licensing at the time of rotation, so the old (test) key is deliberately NOT kept trusted
# alongside this one -- its private half is already public, so there is no safe reason to keep accepting it, and
# there is no genuine license file out there signed with it that this would break. See
# docs/internal/RIVET_CONFIG_LICENSING_LIFECYCLE_DESIGN.md's 2026-09-28 status update in section 8 for the full
# incident and the secrets-manager follow-up this points to.
AcnuKYz3HpXplhI7PF27vTU3y4vYriufokYJi//0AUw=
