{"compared_to":"https://www.ietf.org/archive/id/draft-stone-aivs-01.html","dated":"2026-10-30","finding":"Gate audited its own receipt against draft-stone-aivs-01. Both sign a SHA-256 hash with Ed25519 only. Gate publishes the raw public key itself, at /.well-known/prefinality-jwks.json. There is no certificate chain on that key. The live receipt is not quantum-safe.","live":{"certificate_chain":false,"hash":"SHA-256","jwt_alg":"EdDSA","key_publication":"/.well-known/prefinality-jwks.json","ml_dsa":false,"quantum_safe":false,"signature":"Ed25519"},"not":["Not a claim that the published receipts are quantum-safe.","Not a claim that every attestation draft has this gap. The comparison is draft-stone-aivs-01.","Not a new product. The halt receipt is the same object."],"scheduled":{"certificate":"An Ed25519 certificate for gate.velaru.xyz, signed by a Nisaba identity key, published as x5c on the receipt JWK","context":"gate-receipt-v1","ed25519_verification":"stays valid for receipts that have no second signature","hybrid":"Ed25519 and ML-DSA-65 over the same receipt-hash bytes","turns_on_when":["GATE_RECEIPT_ML_DSA_SEED","GATE_RECEIPT_CA_PRIVATE_KEY"]},"signer_ready":{"identity_key_configured":false,"ml_dsa_backend":true,"ml_dsa_public_key":null,"ml_dsa_seed_configured":false,"x5c":null},"spec":"gate-signature-audit-v1","subject":"The live receipt signature is Ed25519"}