# vev.sh signing keys
#
# (placeholder — real PGP and Ed25519 keys ship with v1.0.
#  until then this endpoint exists so /keys resolves.)
#
# Once v1.0 lands, this route will serve:
#   - vev-release.pgp   (ASCII-armored PGP public key)
#   - vev-release.asc   (minisign / Ed25519 for reproducible-build verification)
#
# Fingerprint reservation:
#   pgp:  (tba)
#   ed25519: (tba)
#
# Until then, contact security@vev.sh for key fingerprints if you need them.