Vouch governed agent deployment, with proof

idnamecreated
ak_2dc20e55ac7a7f4adefault1789908525.8264692

New named API key

name

Only the sha256 hash is stored; plaintext is shown once.

Signing keys

Tenant HMAC keys (the receipt-signing identities) rotate; the response carries only the new kid — key material never leaves the server (§10.5).