Function sign_encryption_key 

pub fn sign_encryption_key(
    signing_key: &SigningKey,
    encryption_public: &EncryptionPublicKey,
) -> Signature

Sign an X25519 public key with the agent’s Ed25519 identity key, binding the two. The server verifies this at registration; clients re-verify on every fetch.