Trust roots

Per Spec §20, every catalog publishes a key registry at /keys.toml listing the signing keys it recognizes. The atoms.convergent-systems.co registry currently lists one key — the bootstrap root, established per Part IX §40.

Programmatic discovery

curl https://atoms.convergent-systems.co/keys.toml

curl https://atoms.convergent-systems.co/keys/root.toml

Root key

Fingerprint	`ed25519:P6+CekZ4v8Y+h4AUvxnVoGc9scE4kwOn3Ee46/3P65Y=`
Role	root
Status	active
Authority	`atoms.convergent-systems.co`
Created	2026-05-22T03:40:32.832Z
Public key (base64 raw)	`1UZtIKkLRMM8PAfvTKHuMvoIE1KVcZ9AjbVk9Bdtrs0=`

 Public key (PEM)
 
-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEA1UZtIKkLRMM8PAfvTKHuMvoIE1KVcZ9AjbVk9Bdtrs0=
-----END PUBLIC KEY-----
 Signed records
  /keys/root.toml — full atom record (self-signed)
 /keys/index.toml — keys class index
 /keys.toml — umbrella key registry