trustmanifest
TrustManifest
The issuer's published key overview used for verification.
Definition
The TrustManifest publishes the issuer's public keys (separated for dev/staging/prod) so anyone can verify signatures without contacting the issuer.
Why it matters
Key handling is the weakest point of trust. A published manifest makes key rotation traceable and verification vendor-independent.