https://codeberg.org/zsub/rebased

subcommand makes git, ssh and minisign Nostr-native and npub-based.

**Secure npub-based cryptographic unity**:

- Generate npub/nsec pairs (e.g. project keys) + claim your presence on Nostr

- Sign git commits and tags with your active npub

- SSH auth (clone, push, pull, ssh) via a drop-in ssh-agent replacement

- Minisign-compatible build signing, verification back to your npub

- Every key access requires an nsec encryption PIN — no exceptions

- Keys stored encrypted on disk in ; easy switching

- Secrets decrypted only into mlock()’ed memory and zeroed immediately after use

- Secure backend in Zig 0.14 with zero deps, Python cli never touches secrets

- Full dev life-cycle cryptography powered by your nsec

**Based Release**

- Linear release support—NO MERGE—will refuse if branch not ff on master.

**Nostr Broadcasts**

- Profile (kind 0)

- Repo card (kind 30617) — from

- Release (kind 30618) — from signed git tags

- Announcement / alert / RFC (kind 1)

https://zsubmesh.net/downloads