# The key register > The current public key of every agent on the team, and the read keys of the public vaults it talks through. *Source: · site v0.1.32 · generated from the same content as the page, so the two cannot drift.* --- Admin # The key register The current session key of every member of the team. The push is the authorisation: each key was published by a session the editor's account lets push to this repository. Read a fingerprint from here or from the member's key.json, never from a message. | Agent | Fingerprint | Encryption | Session | Since |`````` | conductor@book.the-ultimate-insider | sha256:15762445fb34548e | sha256:7b773c490ca3da15 | session_01Kw9UwDcSTJ2nZLAFJMat9U | 2026-10-30T01:07:42Z |`````` | historian@book.the-ultimate-insider | sha256:85ffd0907275f5eb | sha256:fc73af6f84270f65 | session_01Kw9UwBrRHk6F5eoPjZLn35 | 2026-10-30T01:40:35Z |`````` | librarian@book.the-ultimate-insider | sha256:e5768293c14e8cdc | sha256:d80ab019dee0adf0 | session_01Kw9UwBgUFHEgwLsB3TrwA8 | 2026-10-30T01:40:31Z |`````` | publisher@book.the-ultimate-insider | sha256:88b9a9682c1b72e9 | sha256:0260b9a53d147e29 | session_01Kw9UwDVeRbKJZUWiRoRrHK | 2026-10-30T01:41:21Z |`````` | researcher@book.the-ultimate-insider | sha256:4e0287f6640d61f0 | sha256:efc9ce1ed552d83b | session_01Kw9UwBta1dcP9qBJUURLPZ | 2026-10-30T01:40:57Z |`````` | security@book.the-ultimate-insider | sha256:94919aabb7eddf3d | sha256:4048cbfe53ecaf7a | session_01Kw9UwDYutLfqT71U7kmgVs | 2026-10-30T01:40:57Z |`````` | storyteller@book.the-ultimate-insider | sha256:edc67e3cc68b3b07 | sha256:606500cb39b47fc0 | session_01Kw9UwFSAdt6ywy4t5H8kvd | 2026-10-30T01:41:12Z | ## How a session gets its key - It makes the key pair in its own session with `admin/tools/pki-agent.mjs keygen --session`, a pinned, unmodified copy of [the tool pki.sgit.ai publishes](https://pki.sgit.ai/agents/pki-agent.mjs). The private halves never leave that session. - It writes the public half to `team//key.json` with its QR image, adds `team//sessions//`, marks the previous session superseded, and pushes. From that commit it is the agent. - To hand it a secret, read its fingerprint here, seal to it, and send the sealed QR or link. Only that session can open it. ## Known keys: not members, relied on by the team Public keys of agents outside the team that members seal to. Each was confirmed by the editor; the QR code carries the key itself, and `pki-agent.mjs read-qr` recomputes its fingerprint. ### DC Vault Registry (the vault of vaults) the editor's vaults manager: the agent that keeps the team's vault keys (the vault of vaults). `` | Fingerprint (record, signing) | sha256:956934e47063ceaa |`` | Encryption fingerprint | sha256:06c6ccddb7476629 | | Confirmed | by the editor, Dinis Cruz, in the conductor's session on 29 October 2026 ("yes that is the one") | | Source | https://web-summit.sgit.ai/keys/sha256-956934e47063ceaa.json, where the editor handed it over as a QR code on 28 October 2026 | | Use | seal a vault key to it (pki-agent.mjs seal --to sha256:956934e47063ceaa, or sgit pki encrypt --recipient sha256:06c6ccddb7476629); only the vaults manager can open what is sealed to it | [The key file](known-keys/dc-vault-registry.json) (both public PEMs) · [seal a secret to it on pki.sgit.ai](https://pki.sgit.ai/send/#k1.MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0GBgDSrySVIggQjk61hnFneREDnIULzEwcYn0mpQHu7Ux0o9x71a-mVVV6umWJw_YtRJu5TjmUbordI0UzMhuXQc3dd1KSayBMyz9jiks0fUmuAFWvK3WqbZ_QWn879iTHKj1palpGRdsDhpHoSKLiqJrIHUOmXiYr4iS7qVZW4DdmaHM_kuyyJ8_FZzJbAzKGijjM3Hrz76dH37zVaKJHyiKkRd8Enl0YvmcIkNBKOmlwNiPmSJV7Xk4iiF4MQYFGM6aj-TDUkKMFLtLKuKOvBkUYCw7L88DHy0JFRX_nw1LA9IXfhUDSBI4XmuycpmWEzF1o35rblOP7sVDRinmgSZRDXjcO9cHgoZEKy0-s8v2m-AQS1evgGihfwrA1wKxpBMR7QhmpVsvyYpxHcVqop8ZFlgQEqlPevRlSTH30nG47OCBaZFlOUI9BV84gOqW5mwh7zRdr3lmM_Vf9IhorLT20UjBfLI1nsvF2IWvEc9yBBGDARZqEK4Bpy2M2mUbkNvhwQiy4DpndfszO9VLvnez1jpppbEZIDHT1xI0tuZ0EWKmbsG8x3toqKFFbtFEBQC_b5eR_CfpcpRafO5v37l1ulvZjTB_ypHVJgmHR0zU4bFJ2oPazJzjXI_ENEPwpBAgD1ZW1nkcNqFK9NaePgFbtHbWeUktsctObb3VocCAwEAAQ.MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEdJXhI6H9riUxEEdW1z7duvaHzDPy6HFBVPQYTsKJhvPXRoA8reSwy5QhOa3aJlZfiBTvuOZKoW7BwDK1Szn9hg.REMgVmF1bHQgUmVnaXN0cnkgKHRoZSB2YXVsdCBvZiB2YXVsdHMp) As data: [keys/index.json](keys/index.json). The pattern is the PHP newsroom's, argued in [The push is the authorisation](https://newsroom.sgit.ai/articles/the-push-is-the-authorisation.html). --- *[Site index for agents](../llms.txt) · [HTML version](https://the-ultimate-insider.book.sgit.ai/admin/keys.html)*