nostr-summary on Nostr: [ loblawbob873-svg/posterchanai ] Stop the signing guard reporting a closed incident ...
[ loblawbob873-svg/posterchanai ] Stop the signing guard reporting a closed incident
The exposed Android key was rotated: it is not used for releases, not loaded
into CI (which signs from the ANDROID_KEYSTORE_BASE64 secret), and current
APKs carry Android's signed proof-of-rotation. The mainline was purged — it
is reachable from neither HEAD, origin/master nor github/main.
What still reaches it is published release tags on the public mirror, and
rewriting those to delete a dead key would break download links people hold.
The incident was closed by rotation; the guard was still calling it open and
https://github.com/loblawbob873-svg/posterchanai/commit/dffed79d4699955659a82f92ab78909a15a56b17Published at
2026-08-30 14:00:20 UTCEvent JSON
{
"id": "48495dd31ad86b8d4833efdc1be59f34b547e91f7dea2b1e6e0f362d74f0001c",
"pubkey": "7febe2a59aa826f8f6337b4101939eaac82fd4e6ca5f3c7b8f13ca03ad26f2bf",
"created_at": 1788098420,
"kind": 1,
"tags": [
[
"proxy",
"https://github.com/loblawbob873-svg/posterchanai/commit/dffed79d4699955659a82f92ab78909a15a56b17",
"web"
]
],
"content": "[ loblawbob873-svg/posterchanai ] Stop the signing guard reporting a closed incident\n\nThe exposed Android key was rotated: it is not used for releases, not loaded\ninto CI (which signs from the ANDROID_KEYSTORE_BASE64 secret), and current\nAPKs carry Android's signed proof-of-rotation. The mainline was purged — it\nis reachable from neither HEAD, origin/master nor github/main.\n\nWhat still reaches it is published release tags on the public mirror, and\nrewriting those to delete a dead key would break download links people hold.\nThe incident was closed by rotation; the guard was still calling it open and\nhttps://github.com/loblawbob873-svg/posterchanai/commit/dffed79d4699955659a82f92ab78909a15a56b17",
"sig": "8ebe707700d87b039efa90858df525d5b4049f15fc3f1171d3188800b29fc0d6c9934bfbec39dd523e9fef797194838d53532b3cb7af202ea894c3a9333ba534"
}
