Pq Key Binding

Anchored post-quantum key-binding statement (2026-07-30, converged with the trustless-ai/ Merlini+Pavlo group): a content-addressed, dual-signed (BIP-340 Schnorr + ML-DSA-65), Bitcoin OTS-anchored statement binding our secp256k1 verifier key to a real ML-DSA-65 key, so a future quantum-capable forger who derives the secp256k1 key cannot forge a valid PQ-bound identity — only a binding anchored BEFORE the break (cutoff by anchor time, not created_at) counts.

THIS ENDPOINT IS DISCOVERY ONLY, per the group's explicit design ("manifest is discovery, never authority"): a verifier MUST independently recompute the event_id from the returned bytes and verify BOTH signatures + the OTS proof against the Bitcoin header — not trust this response. See the payload's own verify block for the exact recompute steps.