{
  "keys": [
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "x": "XBg_0dFCzp2fLJUu8VqLlOpC61-fkn7clTZ17zj0qrQ",
      "kid": "bibigpt-bot-2026-05-09",
      "use": "sig",
      "alg": "EdDSA",
      "nbf": 1746748800,
      "exp": 1809820800
    }
  ],
  "purpose": "Web Bot Auth (RFC 9421) — directory of Ed25519 public keys BibiGPT uses to sign outbound agent / crawler requests so receiving servers can distinguish legitimate BibiGPT traffic from spoofed user agents. Rotate every 6 months. Outbound signing is rolling out gradually; absence of a Signature-Input header on a request that claims to be BibiGPT-bot does NOT yet imply forgery during the migration window.",
  "rotation_policy": {
    "interval_days": 180,
    "next_rotation": "2026-11-09",
    "contact": "security@bibigpt.co"
  },
  "spec": "https://datatracker.ietf.org/doc/html/rfc9421"
}