This repository contains Tidecoin release attestations and trusted maintainer keys used by Tidecoin CI and Guix release tooling.

Directory Structure

• trusted-commit-keys/ssh-allowed-signers: SSH allowed signers for Tidecoin git commit verification.
• trusted-commit-keys/pgp-fingerprints: Optional PGP fingerprints for Tidecoin git commit verification. This file may be empty when maintainers use SSH git signatures.
• builder-keys/<signer>.gpg: PGP keys for Guix release attestation signers.
• /<version>/<signer>/: Guix build attestations for Tidecoin releases.

CI clones this repository during lint and uses trusted-commit-keys to verify recent commits on the protected Tidecoin repository.