Skip to main content
Every model artifact, merge candidate, and release package in EMEP is signed at creation and verified at every downstream use. This page defines the key hierarchy, signing algorithms, verification flow, rotation policy, and air-gapped alternatives.

​
Key Hierarchy

The root key is offline in an HSM and never touches a networked host. Intermediates are per-environment and stored in environment-specific HSM partitions. Signing keys are per-artifact-type and rotated automatically.

​
Algorithms and Formats

  • Baseline signing: ed25519
  • Signature format: SSH-style base64-encoded ed25519 signature + key identifier + timestamp
  • Optional: Sigstore cosign for public-facing releases
  • Hash for signing payload: SHA-256 of canonical artifact manifest

​
Signature Verification Flow

The key identifier in the signature points to a key record in the registry. A revoked or expired key causes immediate rejection.

​
Key Rotation

During overlap, both old and new keys are valid. After overlap, the old key is marked expired and archived. Revocation is immediate and overrides expiry.

​
Key Revocation

Revocation reasons: compromise, personnel change, policy violation, environment decommission. A revoked key is published to the revocation list within 60 seconds. All verifiers check the revocation list before accepting a signature.

​
Air-Gapped Signing

Enterprise deployments without network access use an offline HSM and a manual signing ceremony:
  1. Export artifact manifest to write-once media
  2. Transfer media to air-gapped signing station
  3. Sign with offline HSM
  4. Transfer signature back on separate media
  5. Import signature and verify against manifest
  6. Archive media with chain-of-custody log