Verae public keys

Apps seal Terms of Service acceptance with Verae’s public RSA key. Only Verae holds the matching private key to read sealed registry metadata.

• tos-public.pem — RSA public key (PEM)
• tos-pubkey.json — alg, fingerprint, TOS document hash, embedded PEM
• tos.pem — same as tos-public.pem

Envelope: v1tos: hybrid RSA-OAEP-SHA256 + AES-256-GCM. Stamp the sealed package digest on the Verae timestamp registry with metadata.encrypted set to the sealed blob.

Legal PDF: VeraeTOS-2026-Oct-12.pdf