Lifecycle-aware Rust verifier release for the 2026-07-11 signing-key rotation.
Source commit: 95e033efd252e9e97029c0ef97a3ccddad9b6351
Crates.io package: dynamicfeed-verify 1.0.2
SHA-256: 798bc660b4e9abe25c7f62bcd8007cf1897ca0d8607d975d8b9ba0b8d841d019
The registry checksum and attached crate match. A clean crates.io install was tested against the live active signer and the compromised historical signer: active policy accepted; compromised lifecycle rejected.
This verifier does not independently validate RFC 3161 or OpenTimestamps proofs. Python and npm hardened package releases remain pending.