0xkey KeyOps — Builder / Release

This skill is loaded explicitly by users acting as the Builder / release operator for a 0xkey enclave ceremony. It does not hold quorum .secret or .share material; it does need ECR, S3, Docker, and build-system credentials.

Scope

Produce verifiable artifacts that the Coordinator and members can independently check:

• qos_client release / reference binary and SHA256, plus any operator-native client builds needed by members (for example darwin/arm64 for Mac operators).
• qOS release directory, especially nitro.pcrs.
• five pivot binaries.
• five pivot hash files.
• ECR image tags / digests used by the K8s overlay.
• a builder-handoff.{json,md} for the Coordinator.