The stitcher. Re-serves an ad pod it did not author.
A demonstration origin for Signed Origin's connected-television profile. The
pod at /.well-known/signed-origin.json was signed by
ads.signedorigin.dev, the ad server: each ad on its own, and the pod
as a set under a manifest. This origin holds no key.
It is allowed to serve the pod because the ad server says so in DNS, at
_serve._so.ads.signedorigin.dev, for ads and for the manifest. Remove
an ad here and every remaining ad still verifies — the set does not.
CANDIDATE — Signed Origin is a proposed specification, not a ratified standard. It is not endorsed by any standards body, protocol maintainer or agent platform. This is a test fixture; the ad server, the stitcher and the advertisers are fictional. Whole-pod completeness only.