From dc4c4fa5c7a939c10237ab497e9530c338cf97f0 Mon Sep 17 00:00:00 2001
From: Natalia Szczepanik <natjiks@gmail.com>
Date: Tue, 28 Jul 2026 18:59:58 +0200
Subject: [PATCH] Rotate the embedded license verification key

Replace the embedded Ed25519 public key and bump to 1.11.2. The prior key is retired; Pro licenses are re-issued under the new key. Verification stays offline; the private signer key stays in redcon-cloud.
---
 CHANGELOG.md           | 8 ++++++++
 pyproject.toml         | 2 +-
 redcon/entitlements.py | 2 +-
 3 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 07ad47a..ce62618 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.11.2] - 2026-07-28
+
+### Changed
+
+- Rotated the embedded Ed25519 license verification key. Pro licenses are
+  issued under the new key; licenses signed against the previous key no longer
+  verify and must be re-issued.
+
 ## [1.11.1] - 2026-07-27
 
 ### Added
diff --git a/pyproject.toml b/pyproject.toml
index 9eed451..70b7ee6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "redcon"
-version = "1.11.1"
+version = "1.11.2"
 description = "Deterministic context budgeting for coding-agent workflows"
 readme = "README.md"
 keywords = [
diff --git a/redcon/entitlements.py b/redcon/entitlements.py
index 66c9501..281075a 100644
--- a/redcon/entitlements.py
+++ b/redcon/entitlements.py
@@ -52,7 +52,7 @@
 # licenses on purchase. Empty means "no key configured yet": every license is
 # treated as unverified and the user stays free. Override for tests or a
 # self-hosted signer via REDCON_LICENSE_PUBKEY.
-_EMBEDDED_PUBLIC_KEY_B64 = "0FbwyahBFjKLGCktY3KK60sVOiaEWBZPDYpW4O1F4B0"
+_EMBEDDED_PUBLIC_KEY_B64 = "NlLwPkG5vVnUEkGRzbMAPyCn7kI4WTVuhi6Mz51EctA"
 
 _ENV_LICENSE = "REDCON_LICENSE_KEY"
 _ENV_PUBKEY = "REDCON_LICENSE_PUBKEY"