diff --git a/trust/allowed_signers b/trust/allowed_signers
new file mode 100644
index 0000000..b2551e0
--- /dev/null
+++ b/trust/allowed_signers
@@ -0,0 +1,4 @@
+# Crosslink trusted signers
+# Format: <principal> <key-type> <base64-key> [comment]
+# approved by flo at 2026-03-27 16:20:17 UTC
+plan-git-harden-sh-design-spec-8b87@crosslink ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC3h70Zc6CSo7PkaMRBZuV9N/Z/p5UIL9x22Sl2Qvhwj crosslink-agent:plan-git-harden-sh-design-spec-8b87@MacBook-Air-4.local
diff --git a/trust/approvals/plan-git-harden-sh-design-spec-8b87.json b/trust/approvals/plan-git-harden-sh-design-spec-8b87.json
new file mode 100644
index 0000000..2df0d6e
--- /dev/null
+++ b/trust/approvals/plan-git-harden-sh-design-spec-8b87.json
@@ -0,0 +1,6 @@
+{
+  "agent_id": "plan-git-harden-sh-design-spec-8b87",
+  "principal": "plan-git-harden-sh-design-spec-8b87@crosslink",
+  "approved_by": null,
+  "approved_at": "2026-03-27T16:20:17.130204+00:00"
+}
\ No newline at end of file