Official verification record

Hub release trust anchors

MAGRATHEAN UK LTD publishes these values on the company-controlled Teslatlas domain so release signatures and attestations can be checked independently of GitHub release assets.

v1.0.0-beta.1

Published 30 August 2026 by György Bolyki for MAGRATHEAN UK LTD, company number 16955343.

Exact values

OpenPGP signing fingerprint: A43B517A25C59994654639ED9CB5BEA1F3D65EDD
P-256 provenance public key SHA-256: a787a55c4b93266453d86805a6cda1ba5b54c76ce31750a468c1dc76a7c18901
Ed25519 Debian attestation public key SHA-256: 7186087343ae93f3d9c5d02347f467a45937339118db1a5f043cb1f6d4e15fe7

Plain-text record Release assets

How to use this

Compare the complete OpenPGP fingerprint with the signer reported by git verify-tag --raw v1.0.0-beta.1. Compare each downloaded public key with its SHA-256 value above before trusting the release evidence it verifies.

Trust boundary

GitHub hosts source and release files. This HTTPS page is the separate Magrathean publication used to authenticate the fingerprint and public-key digests. Never use a private key from a release asset or repository.