Signed updates. Every document here is signed with Ed25519 and a post-quantum scheme together; clients check the signatures themselves against the root key they pin, so this server can't forge an update.
Root keyid edb4641c904e2ee7983b82f91925fd67f33b0960c0bb58c1e50ae538527a8e5a
Current keys.json: seq 1.