Register (or rotate) the public key Tuteliq uses to encrypt your incident records

Registers an RSA public key. After registration, all NEW incident records (rationale, visual_description, etc.) are encrypted with a per-record AES key, which is itself wrapped with this RSA key (hybrid scheme RSA-OAEP + AES-256-GCM). Tuteliq cannot decrypt — only your dashboard (with the matching private key) can.

Rotating: POST a new key here. New incidents use the new key; old incidents remain readable with the old private key until they expire (90 days).

Private key is YOUR responsibility — Tuteliq cannot recover lost-key incidents.