Creates an ES256 passkey scoped to sigexec.lassul.us. The private key stays on your device: this page never sees it, and neither does any executor. Paste the resulting line into each executor's authorized_keys.

comment — how this credential is identified in the file Create passkey

authorized_keys line

—

Executors must be started with a matching identity:

sigexec-executor -keys /etc/sigexec/authorized_keys \
  -rp-id sigexec.lassul.us -origin https://sigexec.lassul.us

(Local development over plain HTTP serves a different origin: http://localhost:<port>.)