pub fn generate_wan_keypair(seed: [u8; 32]) -> ([u8; 32], [u8; 32])Expand description
Generate an agent’s WAN keypair from 32 bytes of seed entropy, returning
(public_key, private_key).
Identical construction to generate_lan_keypair — same curve, same seed
handling — but kept as its own entry point because the two keys are
independent by design and must be minted separately: LAN public keys are
permanently trust-on-first-use pinned by peers
(db_lan_peer_pubkey_pins), which is exactly why
SPEC_JEKT_HOST_KEY_TTL_ROTATION_2026_09_14.md §4 declined to rotate them,
whereas WAN keys are served from an authoritative registry and are intended
to rotate. One key cannot have both lifecycles.