Merchants

Merchants verify TAP signatures at the edge (CDN proxy), then apply spend policy based on headers like x-agent-keyid and future trust signals.

Registry lookup

TAP-compatible lookup:
GET https://trustedclaw.cc/api/v1/keys/{keyId}

Response includes (minimum): public_key (base64 raw32), algorithm(ed25519), is_active.