Reports you can verify
Every file published on Fulgeon carries an identity report — what it is, its SHA-256 hash, its size — signed with our Ed25519 key. We don't say 'it's safe': we publish facts, and here you can check for yourself that they haven't been tampered with.
Catalog public key (Ed25519, base64)
MCowBQYDK2VwAyEApOS3GXdlWzgP3JXQ9JGst3S6h7nm9k0xhllLkobu/ME=
With this key, anyone can verify a signature without trusting us. It's the difference between 'trust' and 'verify'.