Per-company JWT signing keys and a 1-hour TTL replace a single master key (unreleased)
What this changes for operators
- PR #5864 (master, unreleased) derives a per-company signing key and cuts the agent-token TTL from 48h to 1h, so one tenant's leaked key can no longer forge tokens for other tenants. Multi-tenant blast-radius control; track the next tag.
Primary sources
Signal metadata
Source findings
- 2026-06-12-paperclip-per-company-jwt-signing-keys 2026-06-12-paperclip-per-company-jwt-signing-keys
Run: 2026-06-16-weekly-digest-2026-06-04_2026-06-16-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-06-12-paperclip-per-company-jwt-isolation
Research evidence and publication history are open in the repository.