TC-26 Not started Raidiam · Both
Cryptographic assurance for Agent Identity trust metadata using enterprise-managed key material, without the Trust Controller storing private keys.
No artefact linked yet.
Scene 096 minutes
A signing key the platform never holds
A public key is uploaded whose private half stays in the enterprise key store. The Trust Controller derives the key identifier from the key itself, the entity stamps the same identifier on its signed configuration, and both sides agree without either being told the other value.
The point. Cryptographic assurance without the Trust Controller holding private key material. The key profiles on offer include a post quantum one.
not yet recorded
This scene has not been recorded yet
It runs live against the deployed stack. When the recording is made it appears here without this page being edited, because the site looks for the clip on disk each time it serves. Until then, use the live paths below.
What this scene proves
The objectives it answers, at their current status
Status is read from the tracker when this page is served. If a scene is listed against an objective that is not started, that is what it says.