{
  "$schema": "https://kapaciti.se/schemas/audit-keys-index.json",
  "version": "1.0.0",
  "issuer": {
    "name": "Kapaciti AB (under bolagsbildning)",
    "url": "https://kapaciti.se",
    "trust_center": "https://kapaciti.se/trust",
    "audit_chain_doc": "https://kapaciti.se/trust/audit-chain",
    "key_listing": "https://kapaciti.se/trust/audit-keys"
  },
  "algorithm": "ed25519",
  "key_format": "raw-hex-32-byte-public-key",
  "verification_workflow": "Hämta audit-bundle, beräkna sha256 över canonical JSON av varje entry exklusive signaturfältet, verifiera signature mot org public key med Ed25519. Verifiera prev_hash-länkning.",
  "keys": [
    {
      "org_id": "acme-bank",
      "endpoint": "https://kapaciti.se/.well-known/audit/acme-bank",
      "fingerprint": "sha256:df5c240d831482f4b0b46c03198ccec6ec36b1837acd4123dba3894238c6579a",
      "issued_at": "2026-05-13T00:00:00Z",
      "status": "active",
      "bundle_url": "https://demo.kapaciti.se/audit/acme-bank"
    }
  ],
  "roadmap": {
    "next": [
      "Signerad JWKS endpoint på .well-known/audit/jwks.json",
      "Key rotation log med append-only ändringshistorik",
      "Cross-signering av notary för key-attestation"
    ]
  }
}