From a0229a1e64e615a5f994285c265e4d248536817c Mon Sep 17 00:00:00 2001
From: robert <robert@microcash.local>
Date: Tue, 2 Jun 2026 15:30:50 -0300
Subject: [PATCH] Use Ed25519 runtime trust keys

---
 agent_builder/tools.py    | 2 +-
 deploy/20-deployment.yaml | 7 +++++--
 requirements.txt          | 2 +-
 3 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/agent_builder/tools.py b/agent_builder/tools.py
index e90ac68..9738dfb 100644
--- a/agent_builder/tools.py
+++ b/agent_builder/tools.py
@@ -30,7 +30,7 @@ if TYPE_CHECKING:
     from .config import Settings
 
 
-A2A_PACK_MIN_VERSION = "0.1.52"
+A2A_PACK_MIN_VERSION = "0.1.53"
 
 
 @dataclass(frozen=True)
diff --git a/deploy/20-deployment.yaml b/deploy/20-deployment.yaml
index 47c1e53..26d95a3 100644
--- a/deploy/20-deployment.yaml
+++ b/deploy/20-deployment.yaml
@@ -51,9 +51,12 @@ spec:
             - name: A2A_GRANT_VERIFYING_KEY
               valueFrom:
                 secretKeyRef: {name: platform-secrets, key: grant_verifying_key}
-            - name: A2A_PLATFORM_SECRET
+            - name: A2A_RECEIPT_SIGNING_KEY
               valueFrom:
-                secretKeyRef: {name: agent-builder-agent-secrets, key: A2A_PLATFORM_SECRET}
+                secretKeyRef: {name: platform-secrets, key: receipt_signing_key}
+            - name: A2A_REPLAY_SIGNING_KEY
+              valueFrom:
+                secretKeyRef: {name: platform-secrets, key: replay_signing_key}
             - name: A2A_CP_URL
               value: http://control-plane.control-plane.svc.cluster.local
           readinessProbe:
diff --git a/requirements.txt b/requirements.txt
index fa2d54c..16c7d4b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,4 @@
-a2a-pack>=0.1.52
+a2a-pack>=0.1.53
 httpx>=0.27
 boto3>=1.34
 deepagents>=0.5.0