Trust roots

Per Spec §20, every catalog publishes a key registry at /keys.toml listing the signing keys it recognizes. The atoms.convergent-systems.co registry currently lists one key — the bootstrap root, established per Part IX §40.

Programmatic discovery

curl https://atoms.convergent-systems.co/keys.toml

curl https://atoms.convergent-systems.co/keys/root.toml

Root key

Fingerprint	`ed25519:P6+CekZ4v8Y+h4AUvxnVoGc9scE4kwOn3Ee46/3P65Y=`
Role	root
Status	active
Authority	`atoms.convergent-systems.co`
Created	2026-07-30T23:48:48.385Z
Public key (base64 raw)	`1UZtIKkLRMM8PAfvTKHuMvoIE1KVcZ9AjbVk9Bdtrs0=`

Public key (PEM)


-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEA1UZtIKkLRMM8PAfvTKHuMvoIE1KVcZ9AjbVk9Bdtrs0=
-----END PUBLIC KEY-----

Signed records

/keys/root.toml — full atom record (self-signed)
/keys/index.toml — keys class index
/keys.toml — umbrella key registry