article
Two Keys on the Ring: Moving a Build Signer Without a Flag Day
How a release pipeline replaced a single pinned signing key with a pinned key ring, so a build signer could move to new hardware with an overlap window, recorded provenance and a CI ratchet against trust drift.
Read more