signing key

The cryptographic key that produced a signature (the trust module's CryptographicKey). Complements gmeow:signedBy: signedBy gives the identity, signingKey gives the key — the pair a gmeow:Certification attests.

Structure

Property shape: object property; gmeow:CryptographicSignature -> gmeow:CryptographicKey; functional

Use gmeow:signingKey from gmeow:CryptographicSignature to gmeow:CryptographicKey when the relationship itself belongs in the native GMEOW graph.

Profile	External Targets
`intoto`	`https`

Generated from the canonical mapping DSL. SSSOM files are the generated public interchange form for term equivalences.

Source	Kind	Profile	Predicate/Relation	Target	Evidence
`gmeow:signingKey`	projection	`intoto`	projects to / <=	https://in-toto.io/Statement/v1#signature	`gmeow:mapInTotoSignature`; confidence 0.6; lossy: signature bytes, algorithm, signed-by identity

Use to name the cryptographic key that produced a signature — the WHICH-KEY half of the signing act, the key whose binding to the signer a certification vouches for.

Avoid for the signer identity (that is gmeow:signedBy) and for an agent's general key possession (gmeow:holdsKey); signingKey names the specific key used for THIS signature. It is functional — one signing key per signature.

Bind exactly one gmeow:CryptographicKey and pair it with gmeow:signedBy; verify the signedBy/signingKey pair against a gmeow:Certification and record the outcome in gmeow:verificationStatus.