These public conformance fixtures were copied from flex-auth
`examples/secrets-engine/replay/` and `check_request_allow_rotate.json` on
2026-09-28. They retain the owner's Go-generated signature and submitted digest.
`keys.json` contains a well-known **test-only public key**, not production trust.
The old decision is used only to test cryptographic interoperability, never as
an active authorization decision. Hub policy lifetime/caller tests use fresh
synthetic decisions with ephemeral test keys.