{
  "schema": "https://organchor.org/schemas/root-authority-migration.v2.json",
  "type": "OrgAnchorRootAuthorityMigration",
  "version": "2.0",
  "sequence": 1,
  "previous_migration_hash": null,
  "migration_id": "organchor-migration-pq-2026-001",
  "issued_at": "2026-10-18T17:08:40.081Z",
  "effective_at": "2026-10-18T17:08:40.081Z",
  "reason": "Introduce per-custody-group Ed25519 AND ML-DSA-65 signing while retaining the 2-of-3 authorization threshold. No change of organization, endpoints or product claim scope.",
  "old_root_authority": {
    "schema": "https://organchor.org/schemas/root-authority.v1.json",
    "type": "OrgAnchorRootAuthority",
    "version": "1.0",
    "authority_id": "root-authority-2026",
    "created_at": "2026-05-12T02:48:04.821Z",
    "threshold": {
      "required": 2,
      "total": 3
    },
    "keys": [
      {
        "id": "organchor-root-a-2026",
        "algorithm": "ed25519",
        "public_key": {
          "format": "jwk",
          "jwk": {
            "crv": "Ed25519",
            "x": "SH7pQT6QWLFClvMH05tLo_yxxfEXnB0eUV5wBAa_gyM",
            "kty": "OKP"
          }
        }
      },
      {
        "id": "organchor-root-b-2026",
        "algorithm": "ed25519",
        "public_key": {
          "format": "jwk",
          "jwk": {
            "crv": "Ed25519",
            "x": "wrLb5B1pS0LJ-UdsNJFMRsg9tOarqlr7jPBSN1TY2Qs",
            "kty": "OKP"
          }
        }
      },
      {
        "id": "organchor-root-c-2026",
        "algorithm": "ed25519",
        "public_key": {
          "format": "jwk",
          "jwk": {
            "crv": "Ed25519",
            "x": "I60J8MiHG82c-jyWZikHisaLsSYG0p4wA9Cj8dhdc_w",
            "kty": "OKP"
          }
        }
      }
    ]
  },
  "old_root_authority_hash": "sha256:7d720aa028e4b3b94d47b8e8789b0d7f5c8bb0564e80fac7f0ad7b275718e1b9",
  "new_root_authority": {
    "schema": "https://organchor.org/schemas/root-authority.v2.json",
    "type": "OrgAnchorRootAuthority",
    "version": "2.0",
    "authority_id": "organchor-root-authority-hybrid-2026-001",
    "created_at": "2026-10-18T17:08:39.809Z",
    "threshold": {
      "required": 2,
      "total": 3
    },
    "keys": [
      {
        "id": "organchor-root-a-2026",
        "algorithm": "ed25519",
        "public_key": {
          "format": "jwk",
          "jwk": {
            "crv": "Ed25519",
            "x": "SH7pQT6QWLFClvMH05tLo_yxxfEXnB0eUV5wBAa_gyM",
            "kty": "OKP"
          }
        },
        "holder_id": "organchor-custody-a"
      },
      {
        "id": "organchor-root-a-ml-dsa-65-2026",
        "algorithm": "ml-dsa-65",
        "public_key": {
          "format": "spki-der",
          "data": "MIIHsjALBglghkgBZQMEAxIDggehAGFYyVxjuo5vL9p-uBH1YOlXpibi0pSzzmu1HPGuiCFpr_fbOjP_rKV6_QEBngFlzFJ-B_ABlVO5dWVtZeKeeOCCkTa7jKinClgZcWc7qrokDcOfFELImrfkOyQMPXFzDeVRoSPPjY0LmlnOmfxl67pXvFZueAFGeuLh6N2H9cCDGfQz8-0096muVfq6OFYc8uWZSQ6omq8M4KGogxuwtSHEaSAn6mZN_0PEbRZly2je0GMC7Kb8-qsO-zjpKFBBzLlT4pw6sSJPNn6VkTNBgjGS425pE4nrNC65ZZ0G2D4QhDXEJyGUfAzZqpyjdoANsFaW9Ovm_X6QmIrAdtVPNOZR5_xLDVX1Z_d7Wf9I9qSUYah6FMkTEHFquAqZxjB3Ge4CddThWHL2Czi7duJfhCShR0-HunYYCX1C23nfG8BJBdyma1qx2WTqRJNR8ZdzrwqEopEi0jhyknUFdMFvlluQ7gVdR1h8GpzPzWINO7ic4qb2iXW4N9jHBYJg1rWmd_bV64YuN6kHEifYAch_FmsrWSo3mG9bdjcZzPh6Ar-Iatd_2X-qmcp4AMhpqn69PLSmHhL_2WzhbPVt9VkSS5vHPjCIZ6T2zmtTYSVga1Za4I0wbS80st4rwbDnhbZYdgXv2DHP0JpSNLFLBkFncjkHqgXv9VYmOpCANvoqBKUxaWMqkm2vC2tPaSgfcER0bbE2NlqkwHBDhvF9mSsvtzqQWhj0yvpZlsn9GO7FzbVkBKDD21gjHoJ_xkSdUPsNjRMqwvX7C99Ly7eLzEa0PW3mXGT3fY4mHxaQWbCP1uvHSi0URikYWy04yrNDCcd5i959_DlKNOsbJ3Lkc2sxuljZ5fJx0l0jwfnwruX5KQTDXRjpcEQg98qxNHupt1jt2jd1HBKl43RIi3URY4NcTkn8XOwYJecSu4WPHy0zIJ2n8ZQB4l7R2NB9H7bCrufwwzCGk4dMVdtqW4URBnA9ad3QvAIf28RYHFdIVQKcJNGIHqTzS7Q-SScXtGBDL-ntSPNcyzndT0N5JGxGsg4Z5WKOMgng2yttpeLRCvNZXXxC27xi6EY8sWl0iwQJd1DtZZTH78FnL-oPgMd2meep2tfPvvaX0hho2idzCHBjyDRvRZki8QwWIYWx6rVSiQ2hE_yq9Rke_XBSmpxVp_V-7vdfLDxiYHDdmc0NlkIz9iU2zRmsDKG2T28-u5IfAX3zsdOFIFqeTPXExs2QpEfAroF-6ZQBGVB2FT1qX14MUKLR8mvLL94dVc7RqvDqbF6B5usL0KrcQAAa3PSq21oooXDwBAPmtMlvjpkm7hrwgw8lzVnxthmidZocUxCRcUVcIbVde9-sMnrIAYjUIErT9ttYjbUNWyZrzrJ5HdSdIJxbT4I1IZgyJ427-UGai8fjoOI-7CP6KqlJSoUNmwt94YDwYkdLvqbnpXVdUzFDI9t0LGeIdXt3FQpI0kcQ9Y6V3PR-y-lKyZ1WvO9y_u-JVRqikCdD4FYV_8uTwKuQanAmhu9vduJQuOT1pX1GOFQnLg3q66SKIAE80GRuojgP_9zVYAWu524BhS8IBGKQVjG6y5j1hXy6sfRbP9xFjPB4T2GO1Yf_WaRYcDDPOb6jt_2zmTgDmnlEXUAyEbpv_Z31tux7DEvaF1SFK1FFVmwfLGEYkVqf57yteawO9EuDi8SXFowpFPLSlSc6v2HXYuTP92wwwRxSZhHElDq5NL4crWPCdYUy6LeTwSPyHIEWQkhNboc1qqrkxKbkJ-rqClRaJY3LMzW1GZ_5IPyNbQzm4Dgel1lIAs1GEN63KKjonUd3KM4BN7lSwVP_GJrtav8uS6sYn5C0_4yYJMbyOFPUQ47BT0DI94EbhmRleImU0zIlhMnnPOv_o7IcuB_xH-ewBfVf3VkXV7o3fRAKDk1wfXHVFHGDnTlO6TCcg37Xp6917vZVI9s91YmMzh2_7ZJM7dFs163pdc5TbKo6Y8mZaOBtaCWIDIu02zR9kynqvzIJQsSA_t5WoIhvfdsA4JlkR3fj9S1hQZaVO5FVX89Sz0gfIWo5aYXKxQI0R-p6ToBNZCwDdtZzjN3yXtE5oySVbT3lRNt9IcjMa4BWvLP9xPyK-Yu35Dg-UH4FkrllcQe88Vp3HH47EbYVkpYHaeiGc2kFXNzl6R8jvURdjy4qvQMx85u9F3vjw6p0JWWplHTX1LvvxLWy7LhuIxuHvovDpVfqCHo-ZMT8Yr94JJuTlLoNYUt1kttyAD6cgnuKZAo-v6b_Pz7eejJ6gvSFtrKPxkYWe4gVmQ5FgnRtd_cEebEhxu39g5TbhbXOcaDWO21MQHZqtqroFr3Y7aUXaEg5nAcJM8dym-94CPUxwivSl-oS4Zoq8jF4VNoC5JwiK-xzeA9ZXijG50eWAS3of7QNeqiAz3p6apc-7gQOOsnrukxPkNSqDYHY9CO3ufU5LP4w6DImTshaHnblULhZEPsc62FlznKxAOl0386TOekVCsCUTlgXrIz-xb8_9j0Nnr56IZBkyfQRYT3TaA_gD-iG9XhiBLwFvznlEbjetAqmiathdxH65dlbKb0pWsEvRes-we_e_dhrLaURz16D-XxO"
        },
        "holder_id": "organchor-custody-a"
      },
      {
        "id": "organchor-root-b-2026",
        "algorithm": "ed25519",
        "public_key": {
          "format": "jwk",
          "jwk": {
            "crv": "Ed25519",
            "x": "wrLb5B1pS0LJ-UdsNJFMRsg9tOarqlr7jPBSN1TY2Qs",
            "kty": "OKP"
          }
        },
        "holder_id": "organchor-custody-b"
      },
      {
        "id": "organchor-root-b-ml-dsa-65-2026",
        "algorithm": "ml-dsa-65",
        "public_key": {
          "format": "spki-der",
          "data": "MIIHsjALBglghkgBZQMEAxIDggehAFQoshNCfh4ufV7wqAqk6J27WDGROtW9MH2osP9w0qvbD8a27YOmqtAmGeL8NBI6XkAIzj-dHJg9FR7GToMa2ocRUz9rIO2BiTdk0FiJ1tfpdzJoEE8UtbeewSQqRgAksBYbGNvjGu3in19p4nK0h0rWQleGam2WryheqTU2JD-mCu-EyCoxOyKFZPganUs60bF6Tj4-fsC0VJDhjZe_F9g1mHyarLr6kYzHg7_MSV8xeAIxGqy85rJtcJ2HyytMFn00KUhh3lgwDJ4C01gnZ5JECJmRhAVdv5dVDE-2v__wWUSHy2ddq3EKgmDVAkWragrWFFLPLnQW9h4XcLGnm0PkdI9wyf5DUzngLWRNWmlr5dgX88eY2YSy0d7HL6MmtIsgfNGm-sP2RMG2UcmurVefHVzvaIoxDwTVHuVfI9ZJ5Y0gAdY9l8Z0jkmmsrgXM8eLGDPVoJiQcU_SqJlzrmlayp0TDtK3gPvGrzYK9OxRVn-E7kaHY0OTfDrEk9MloOzQWA405skLVV3wy4_iMIsv6WFUkL39aPJAHfvbG_pvKp303gYBMgJTeqLuICofAUlDQ-vH_CFTEPAeQAfDdQUEA6HhCNshHF0eO9Xx_PUo668Ho7Qdukd37AmqzTqucBm3lmF_KUyMVuBYRGXN9vKjwiQPh7Ts749o8l2YhAexT_2NonRB6t1GEdlH8b7O4ajZwRRx2Ma4iSXD7kIt-duiXxf1mnEWrJkHhx6e5GrQ8b-LCFwDvxUqG5DUbMYMpwcHp4QSlqNv3bCzUf27qy1g9y0PsCUzFs79D0IR3whyrVcKMkJrP_V6TNPxXiM2Lc34HJ1DvxrDY_6-ouI4pDbxXIY-QfiTU2Cbnkppkoxt_l5rM75I-xMIdpE6gkwy9IuP_fyukOJq5ROcwNLBZoSNAF6U84AHtvypbqy5tH7ZhPCxJ_aS_pNs_50hgQWwNe45CVz9BcL7t9_4_GID5Bl_YYWP_jkEJf3CDD_ss7PpEufbNILrS3_4IrVoc65T-To5E0x4zuETcXHzO3MeiaRY2hDItUaAslIZP5eWFsBAo4uSGgHvA1QBq5wDcqFUUkhK9pxorjPHHoTLEbH23o1fskD1c8mODYnzljGJ_mtW-Q0anryt62xrLusg_-R_ggeeW4jORFLHRlrdNAdqLeq8CGbD1_ZsM17kZU5ojw-QjIfCLCXt28H36R8_Roo-vuBwvUYiVRXiE3RumU9_lSUG3aopEEx8MkQm4-WytuoPQtBGeQhXrXF-gPPTLOpJebKYxL5eIbM6FMiPJzh-fEWIKr34c78V7ZtPdZQFwmfYpIAQiAk2Q9Qb3vgmiiKdAjJHaplCi7QUSbhpel2dYc18LBhcJiOiRWZgGYxfZqK4sEUdo72sfnpD-liR17G8ZNW9fCDgryLB8Wlo_kzpleLObiyj8ugjQH1zfFIEnLcXSZvNY57mODzBgUyK6icd0cH1nyjCzjO0aKVS93PIaaiSjDDbO2Vl25VnM4vKYOsHLuV96lRvW9LO99Anryqo1UDUH7G_VI1j8LZ0ajfNdL-DVMVX4a_3BlN_jIQJX8HQ8kg2SD2BPE9pJ85wVcj-m2VfAstvAX-d_4Xv4ES8A5h_W82-0JvVYbH0CBCMhTcBZDEvpibo3C8Wb6TrfHpDsI7OiUpn2ip-NkEKC1mdplnOo9XsWerhxIBNPf2Vv4wZ2SF8wG6md4dPVfvJq5M1F9aEd-_9Dj9wMeIOKgs1eEqJn-r_gQgvIPgHjUqM7wrW70gXIhaO01l4z_Wm43pxpj9XqC2ctzEqtNcJhXKpbHtg_3h1ZYugaNlNPNTXkvk6mUAe7p160qmWnmAqi-EsNG9XGuBkntz3-EJDpPgHV0tvcfxLfANHnkituoiLOqRTst58JaT5dYTnABgc8cCKF0ek3FVIk2D9c8lUJiTIJZgk6D1YJklIMCAbg3kIL-Z6TX4kNmJuCl5FcJbInK5y_LY2h7_iTcCaTaNirodRwcJL5kVnFchazjpGy2CSlsu2cqzjOLVre-nQ7I4YXbf8c5pWcJ4sZ8k21g_U_AKoMxlRtMKGcOC_8hJP7poRgs9zW9HEgcoQUCIdUBg0hQS8EMxFpXALG7-hjvfzXUeCvX46X7eJ4g-EUKmEPE4H2k0P071May-gImV4tHG909eIUjLA_e2XzFBXpZsrMyOjrog5RJHrL84Yy8Hj80QtNoEcbp8jmCjoJq70uyftdIkbLC64eHxv5dO_rr15sHMcK1ANjshzOD8EiVyxqH83saOpLkikdprBm18kU74aE3vxZoDW2lENR-i39CnJ24KqW0iUcRHKl83nS6V4q1u1xs2RIgnyWl34UD_jZw1ulADU8RDMB0Kxo1yepxy3I9XU7NZMFMxX1o5GxuWnpDSelne8IbSgMEC6pimK88kqaKLBUGkfHZX07Skdh02UHvrkSSpTWLLxtGXyV7YcV4jiv5IZ_wMIEsOoGbdmE1raeca2pCNvE3GgrseceaJmR1o06oT1rK7tv3HKAApqPtDbV-pIhENRSHbkFaSROvUMhILIGACT1PfR5Vn8p0AQqiQPMxI3rzdtUKSliiUm-9QV5cO0"
        },
        "holder_id": "organchor-custody-b"
      },
      {
        "id": "organchor-root-c-2026",
        "algorithm": "ed25519",
        "public_key": {
          "format": "jwk",
          "jwk": {
            "crv": "Ed25519",
            "x": "I60J8MiHG82c-jyWZikHisaLsSYG0p4wA9Cj8dhdc_w",
            "kty": "OKP"
          }
        },
        "holder_id": "organchor-custody-c"
      },
      {
        "id": "organchor-root-c-ml-dsa-65-2026",
        "algorithm": "ml-dsa-65",
        "public_key": {
          "format": "spki-der",
          "data": "MIIHsjALBglghkgBZQMEAxIDggehANrTLtAGz5mU7LAxeCQHR7GsMlAbwVcidg0vmigN41D_cSimfUusTdv4TNaaHgHalsgS82NjhXLtcqUXiow-nAfc6qplchdf9r4VEU854oAKnRsRlkWtC9eB-J3rkR6UKFnpHmMZNSrP1Y2l_2VJYyipuzeD_pdKB0eP7OBrpkKyDEoCrjofaO4-jVgMymIPjshprsq7R0qOybTH3EWpgNk29djq30u0YCf9fC7hczLqKXi-GgY-dyOPvWdzk6WnlXIjSlz1C4ZUvVP5wTiwwNOUTKGu8CxalXSqg7d_8NeAg_gQYgq8yISRRPjTIY6ORBh4NWr2Jcrrl3AWqXgViV_FrolpuCaDqoOJVe2zYzKapYtt_Y00CDSRB6Dybd1gY63U-4a_a6t01jLF_AO3wBhpkT89VWLSdkam27R5LoLx_bKM3GOtgmvJ6hlTVFhM0YZRsQgjglvatMGYzCDkS6dc5PVugyHvOHthUXd1m7odZnTss7_YOt-ZujK_q8EvSzGdYeHSF2c5uRo-9OP--xaKnfh0gL5Q1uQFquEmy2kw5XU7Oz3MeenYDok-6TeUCYvEYj-mnR5Vk9RVIQ5iE_nx-S09ideLqTLZYTDTjJmfprKmjeXQuJoHfbBVwIlKjNGmINmEncjC6L9Psk_ZVlq1wmE8H6Fs3z55pUo6qIbchORtlRirkm_WguepZClGlNsji9l2iPnrIV1ei5j3DywvRUalg0thnFX1ppXjtep0umtx8KJZD_j7wGbcHE_bSK34Inh2G8cQzhVZcjg_iyEAmcvDNqzicmyT63zYbQR6AgFHHHd3wvC9cv7DIDrXtH_7WAN8yH7cDartkKdr4z5M9VI3TjcEM3MB6f4Z86PdD2NMq1bnzI0AeNBZFzHvA5v9aDWA9kFRLm4dHX_5NFRVIsny-ZjAP3EePCWlMZosUnwgpBkxQtWXvu0ds2Bsj_0CQ8huT5D3tKjb0EyO6sQtuhMc7VOqsUhFXyfuPB8PXD3flhkOlsjujx6vB0EXzENZgGoYN8TkPpk3rBUKnH4vHpKR7rqD6swEa-4y3JP3Xu869ArPhp4ekC3euevqaKOHfIKvO1-jFlNCQPSwTYH_5wTk5vcF0yr_ZQ3gQeGWHNtYjwGNnysQ6WfW9jiRUWC4uH9LKdL-1sobrUmbqwkl12_7qm8SrgMHpeQK1dl0binzZxE4Y76wymoVuaIHKfwBcSUKg4VTxF7bfBKq3hcLPJFPEI4SAPW9YhBn9DBU5im_X9UD_x1JmLpHr1brVFywgYetm8xUejcy6aEUxbe83-MyVwuxv9iFhYUVWh0FX9PJ5JzGuAAQH-LlhPtNgrFRp6BN6_eUw7iQ1GiSYswNP1I4lycmCaxoXMt48YzzbClGqxgrLqFf8DUi_hzD-soLHinfipgnVTT3tY16vc2fm2pvK_Hj5XmyYSn3T78naTdZINfYh68CeRsuQoWSaR_K05-en_l9ARYdw3Nt6rQqy_gtetSSiRIXLUoguzRA5qeHFoRXHpMPXP28m9IHg3YdSyupyWguj97-dVYrocO3ekpCKsvMPabKHxL0rwxV7swD-ZwXpeqNcmDaYVkRnPXrAh9JKGEUQLW2BoMEmKQzR_3U8dz4vQ-Zwz7xGtKhPJEvgqGkGEEs40ChnDE_pR_MupD0WbHh3UwJp3e4Avju6rTx9WS43YwsHX7OVx_HmzykFXFLFWxR_a3DRo--j-mHSvyMccJGL0HugX9V0sz3Zpdk-7L4-KbZ3GX6YEEPh1w6WMI1xebYIJQPt_mUVrrZesifnKRAUnzpPFriD5tzC9b4Nm1Yx3LXHYJauTMn4WvlomZcCDw6EB25_qwdI6UWWTyCxTdOUI4lIRb8Es2Lrlh26UvKPhcu2xQfW0BKvY25HsStzF_jIWAhiMOymclE4NSql364O0pDZUt5jtQJf74xIBOyGqfAhk9tYkNu-8hgmvNmq7CD_A4Jpmg2kDVccct3kVowNXqf_Aq1CwrwZz0wSOZa7zM-bOVsx8G9wGqriE4jQ_J2kjSyfstBwnWxj2xviu0YhIoMWc0zP8UZlOaWAW1eCQWVp3Y8OH6V2RfmLAv859HTkM5986ewmJ4LyjiZVW-M5Mvzoq7JRHO16OcV7Z_NsNAVLipVICs4tUNQzopA5XmzC7T9uzhBZxjWl_AkD5dxFu94wkXZQYoJq0w8GUAkyhQ93brKa0x0nQWtlns5xOD9VIDk0oAD3egSHhpGvGHXZ6BpeJ1HVtKyUuhtEIshLaP8pCeujAxr0meIa2zi1GVFV1qxpmfai0urKab5qZ-le9ZErp9ij8S8XAIU8fCVEYHZ-PR5-Ob0_GmdK1Gj-jctPkgjGydNmSyMFZe5uSyCgCAQ7LMg85uEKu7m-S4UdExWApDWur_3UR8PSRRwrl8-RLiiB4JNTjB1g7GIjxATUakyt5kanNTvz0280cchskplIrJp8AVdnbRNj7wq488BpeBu7dK-LG98e85YhEkWqZpBZyR-6f31XNoLx42B7Y0sPDFz0nKDYRON9YXS92ysjnqldtzz91PXOsT7x361lIsu8x4oFR2U9zrYOXst0_RgRK7iREhh"
        },
        "holder_id": "organchor-custody-c"
      }
    ],
    "signing_policy": "hybrid-ed25519-ml-dsa-65"
  },
  "new_root_authority_hash": "sha256:8168cae0c29218f2bf847d96f45e9d9fd85ba6eee1e5c01ef6ff175b438e3d23",
  "supersedes_statement_hashes": [
    "sha256:5811e45488c093e8820b35edf144a8dbae0c20a79063a44993043bfdf26a0a36"
  ],
  "notes": "Requires both old-authority authorization and new-authority acceptance. External pre-compromise publication time must be established separately. Preserve the old package and anchor the complete migration before algorithm retirement."
}