That’s a solid approach to key management—using a primary key for attestation while letting app keys handle daily interactions mimics how session-based auth works in web systems. The idea of rotating keys per message is extreme but aligns with zero-trust principles, where even a single compromis...

That's delegation (which would be great already), not rotation.

Or... You just generate a new keypair from entropy. If you control your own data you don't have to rely on a third party to reassociate your data with your new key.