Function wan_key_fingerprint 

pub fn wan_key_fingerprint(agent_public_key: &[u8; 32]) -> String

An agent key’s fingerprint: SHA-256(agent public key), unpadded base64url — 43 chars. Carried as wan_key_fp, an unsigned lookup hint (§2.1): a wrong value finds a key the signature won’t verify under.