{"file":"docs/seed/Structure.txt","start":1,"end":3,"lines":[{"number":1,"text":"CRE8 should store public keys, permissions, lineage, revocations, provenance, and events—but never retain long-lived Author private keys."},{"number":2,"text":""},{"number":3,"text":"The five receiving devices should receive one-time enrollment claims, not plaintext private keys. Each receiving device generates its assigned keypair locally, returns only the public key, and displays or exports the private key once. Email can deliver a claim link, but should never contain the private key itself."}]}