crates/gunnar-public-site/src/release_key.rs
//! **Release signing**: the one key Gunnar's and Holger's releases are signed with,
//! the owner's YubiKey key (PIV slot 9c, ECDSA P-256, generated and attested on the
//! device). The key id is written here and nowhere else. Since 2026-10-29 no public page
//! names it (the owner: llms.txt says what Gunnar is, the way in and the repositories,
//! nothing more); the key and how to verify a release live in `slsa/` in both repositories.
/// The key id: hex sha256 of the release key's SubjectPublicKeyInfo DER
/// (`slsa/release-signing-key.pub` in the gunnar and holger repositories).
pub const RELEASE_KEY_ID: &str = "d24d3785e8281bcd37e8f2c40a3a85e8152d3ce2200a5c929a1a5ca636e8249e";
/// `slsa/` in gunnar: the key, its YubiKey attestation and how to verify a release.
pub const GUNNAR_SLSA_URL: &str = "https://www.gunnar.rs/nordisk/gunnar/tree/slsa";
/// `slsa/` in holger: the same key and files.
pub const HOLGER_SLSA_URL: &str = "https://www.gunnar.rs/nordisk/holger/tree/slsa";