Trust Center
Report Signing Key
Every audit report PanGuard issues is signed with the Ed25519 key published on this page. Pin the key ID below and verify any report offline — no account, no API, and no trust in the delivery channel required.
Active signing key
Active- Issuer
- PanGuard AI, Inc.
- Key ID
- pgk1-621b5f58dbfa5e2c
- Algorithm
- Ed25519
- Created
- 2026-07-04
- Usage
- Audit report signing
- Payload format
- PGA-SIG-V1
Public key (PEM)
-----BEGIN PUBLIC KEY----- MCowBQYDK2VwAyEAE8yWwjJ9K3FUibtTZq640dHJVEGw26AM8NiM749fzqU= -----END PUBLIC KEY-----
SPKI-encoded Ed25519 public key. Safe to distribute; the private key never leaves the issuing machine. The key ID is the first 16 hex characters of the SHA-256 of this key's DER encoding, prefixed with pgk1-.
Verify a report
Obtain the report in JSON format. Audit reports are delivered as HTML, Markdown and JSON sharing one hash and one signature.
Run the verify command below. It recomputes the report's canonical SHA-256 from the body and checks the embedded Ed25519 signature fully offline.
Confirm the reported key_id matches this page. A report signed by a key not published here must not be trusted.
pga report sign verify report.json --expect-key pgk1-621b5f58dbfa5e2cMachine-readable key pinning
Automation and CI pipelines can pin the current key set from the well-known endpoint. Keys are listed with an active or revoked status.
What this signature is — and is not
The signature proves report integrity (any modification is detectable) and issuing origin (only PanGuard holds the private key). It is an issuer-held cryptographic signature, not a certificate issued by a government-approved or qualified certification authority. Jurisdiction-specific legal framing and limitations are stated inside every signed report.