Identity assertion signing keys (JWKS)

Public keys that verify the Runtype-signed {{_identity.token}} a tool call carries. Verify offline: check the ES256 signature against the key whose kid matches the token header, then the header typ (runtype-identity+jwt), iss (pin it to the one Runtype organization you trust: <API origin>/orgs/<organizationId>), aud (your host), exp, and the per-scope assurance in the runtype claim. The same keys sign agent access tokens (typ: at+jwt) under the separate issuer <API origin>/orgs/<organizationId>/agents; accept those only if you pin that issuer explicitly. Cache the response for up to five minutes; re-fetch when a token names an unknown kid.