Joe Boll — Stamp identity coexistence attestation
=================================================
Created (UTC): 2026-11-14T08:15:00Z
Subject:       Joe Boll <Joe@joeboll.ca>
Purpose:       Prove that the classical CMS, OpenPGP, and post-quantum
               signing keys used by the local "stamp" system are controlled
               by the same person and are intentionally bound together.

This file (COEXISTENCE-ATTESTATION.txt) is the binding statement.
It is signed, separately, by every signing key listed below. Matching
detached signatures in signatures/ prove common control (coexistence /
cross-attestation). Public key material is shipped alongside this file.


1. CMS / X.509 (PDF PAdES + detached PKCS#7)
--------------------------------------------
  File:          cms-joe.crt
  Subject:       CN=Joe Boll, O=Joe Boll, emailAddress=Joe@joeboll.ca, C=CA
  Issuer:        self-signed (same subject)
  SHA-256(cert): 88c88c8dafa8c235af4b7b26ccc7a8031abe63d451c3e79cd4a38ab0e7320eeb
  SHA-256(SPKI): ef2485b747d7b9bf7a46ff6161125c3d30f4ac4a78e3df1919413d4a1e8b74bb
  Not before:    2026-11-12T03:19:23Z
  Not after:     2036-11-09T03:19:23Z
  Certificate fingerprint (SHA-256):
    EE:A2:C9:C4:AF:28:4E:85:4E:67:A3:66:A7:D2:F9:5E:29:16:44:08:CA:88:7E:D8:2C:A9:C6:71:1F:68:9A:A1


2. OpenPGP / GPG (detached clearsign / .asc)
--------------------------------------------
  File:          gpg-A27F71AB1E015272.asc
  Primary key:   ed25519
  Fingerprint:   A008 A011 308E 8686 A8CC  7E5B A27F 71AB 1E01 5272
  Key ID:        A27F71AB1E015272
  User ID:       Joe Boll (stamp signing) <Joe@joeboll.ca>
  SHA-256(pub):  1617f1a97d72994765fa5e1154c850c3b3b89324bb9ba0b7bd6e3d4ac189d69d
  Note:          Also published as joe-stamp-public-certified.asc with a
                 certification from Proton Mail key
                 049C D95E A09D 6316 F742 7974 6E14 7753 D3D1 935E
                 (copy included when present as gpg-public-proton-certified.asc).


3. Post-quantum — ML-DSA-65
---------------------------
  File:          pq-mldsa65.pub
  Algorithm:     ML-DSA-65 (FIPS 204)
  SHA-256(pub):  3851938fca0b3b81a71ec6726a3bb65b29512ae8230df3c4135691b8acdcac48


4. Post-quantum — SLH-DSA-SHA2-128s
----------------------------------
  File:          pq-slhdsa.pub
  Algorithm:     SLH-DSA-SHA2-128s (FIPS 205)
  SHA-256(pub):  72584611fe46ec702841b62dd24f9e81c4d669dabb19bc246318f212bcb923d3


Statement
---------
I, Joe Boll <Joe@joeboll.ca>, attest that:

  (a) I control the private keys corresponding to every public key above;
  (b) these keys are the intended signing set for my local stamp system
      (~/.config/stamp/config.toml → cms_*, gpg_key_id A27F71AB1E015272,
      pq_key_dir ~/.stamp/keys/pq);
  (c) a valid signature from ANY of these keys over this file's bytes is
      evidence that the signer also affirms the OTHER keys listed here;
  (d) this is a coexistence / cross-attestation binding, not a CA hierarchy.

How to verify
-------------
  See VERIFY.md in this directory.
  SHA-256 of this file is recorded in COEXISTENCE-ATTESTATION.txt.sha256
  after the signatures are created (hash of the exact signed bytes).