PGP public key for security@<your-domain>.

The actual armored public-key block is provisioned per environment by
the operator. To replace this placeholder:

  1. Generate (or rotate) the security mailbox key:
       gpg --quick-generate-key 'Security <security@<your-domain>>' rsa4096 cert,sign,encr 2y
  2. Export the public key:
       gpg --armor --export security@<your-domain> > pgp-key.txt
  3. Replace this file with the exported armored block.
  4. Update Encryption: in apps/web/public/.well-known/security.txt
     with the fingerprint comment.
  5. Commit; do NOT commit the private key.

Fingerprint: <to-be-set-by-operator>
Last rotated: <to-be-set-by-operator>
Next rotation due: within 2 years of the last rotation.

-----BEGIN PGP PUBLIC KEY BLOCK-----
[placeholder — operator must replace before production deploy]
-----END PGP PUBLIC KEY BLOCK-----
