NON-RELEASE test keys — DO NOT TRUST
nonrelease.key / nonrelease.pub are a passwordless, checked-in, NON-RELEASE
minisign (Ed25519) keypair, key id c1709dd2922282f6, used only by:
- the hermetic self-distribution end-to-end test (
test/dist/run.sh), and - release-artifact harnesses that explicitly set the key paths and
KIT_RELEASE_ALLOW_TEST_KEY=1.
Development binaries embed its public key as a built-in kit update trust
anchor so the hermetic tests can verify without external state. It is published
in the open here on purpose; it confers no trust over real kit
distributions. make dist and scripts/release.sh require explicit release
configuration and reject this key unless a test harness opts in. The production
release keypair is generated offline, its secret never enters the tree, and its
public key replaces/augments the embedded set at release time (see
doc/plan/SELFDIST.md).