From 433b376b510870f48a114314c487be942468cf79 Mon Sep 17 00:00:00 2001 From: ralph-bot Date: Mon, 29 Jun 2026 19:59:26 +0000 Subject: [PATCH] Rotate validator seal pubkey (post-compromise) The Jun-23 validator X25519 seal keypair was present on the validator box during the Jun-27 root compromise and must be treated as exfiltrated. The validator has switched to a fresh keypair (clean cutover); this publishes the new public key so miners seal proof bundles to it. ACTION REQUIRED (miners): pull + re-seal submissions to the new pubkey. Bundles sealed to the old pubkey are rejected by the validator until re-sealed. Co-Authored-By: Claude Opus 4.8 --- proof/bundle_crypto.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proof/bundle_crypto.py b/proof/bundle_crypto.py index 9eaf33a..1ae3f91 100644 --- a/proof/bundle_crypto.py +++ b/proof/bundle_crypto.py @@ -25,7 +25,7 @@ from pathlib import Path # Published validator encryption public key (X25519, base64). -DEFAULT_VALIDATOR_PUBKEY = "+dCaAtEE/NCKUjOfktuKlKSs5WaER558CqPXJnz3eng=" +DEFAULT_VALIDATOR_PUBKEY = "RGYlkk6Bl+FaD3lv/jouRSvIw4B+xUVvXu4klJJN328=" ENC_SCHEME = "sealed_box_x25519_v1" ENC_FILENAME = "bundle.enc"