# Keys that may sign this repository's release tags (git's SSH signature
# format; see `git help gpg.ssh.allowedSignersFile`). Read by the release job's
# tag check (build/ci/release-chain.py collect) as master has it, never as a
# tag's own tree has it, and taken there only while it lists one key: release
# tags are the owner's alone (GOVERNANCE.md), and build/check-release-chain.py
# fails on a second line. Read too by the repo-hygiene job
# (build/ci/repo-hygiene.py), and usable locally:
#
#   git -c gpg.ssh.allowedSignersFile=.gitlab/allowed_signers verify-tag vX.Y.Z
#
# It was .github/allowed_signers, read by the GitHub workflow sign-release.yml,
# until the project moved to GitLab; the keys did not change.
#
# One principal per line: the identity the signature must carry, then the key.
# A key that is rotated is removed here and the tags it signed stay verifiable
# only by anyone who kept the old line - which is the intended property of an
# allow list, not a defect in it.
christopher.j.holloway@outlook.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIB9HiI7F4JgXDg9DyvL3KSQUlKfygNjVkT2rKf6pOUL
