{"algorithm":"Ed25519","public_key_pem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAWP4tavcYsZn5oCGuv8xg4tLyht+z7O6TvgBUG/2hpQ4=\n-----END PUBLIC KEY-----\n","public_key_b64_raw":"WP4tavcYsZn5oCGuv8xg4tLyht+z7O6TvgBUG/2hpQ4=","fingerprint_sha256":"959b60f73e94ea3854d24a71dc0eea39b8fdae43547f331c688ec9877602eded","canonicalization":"json.dumps(signed_view, sort_keys=True, separators=(',',':')) where signed_view is the verdict WITHOUT request_id, processing_ms, and integrity.processed_at_utc. The exact signed bytes are embedded as the base64 'Signed payload' block in each PDF report."}