Skip to content

Cambium 0.3.0

Choose a tag to compare

@TheCryptoDonkey TheCryptoDonkey released this 10 Jul 17:37

Multi-identity release. Cambium remains the Android NIP-55 signer that holds no keys: every signature comes from your paired Heartwood hardware signer over NIP-46.

What's in 0.3.0

  • Multiple identities. Pair each Heartwood identity separately (each bunker URI is one identity). Apps bind to an identity when you approve them; NIP-55's current_user (npub or hex) selects the identity per request. Cambium never substitutes identities silently: a request naming an identity it does not hold is refused, and an ambiguous request asks. Each identity gets its own isolated connection, request queue and decrypt cache.
  • Activity log. An on-phone, metadata-only record of signer activity: app, method, event kind, identity, outcome. No event content, plaintext or ciphertext is ever stored. Toggle off or clear at any time.
  • App lock. An optional biometric or device-credential gate on the management screen and approval decisions. Background signing for already-approved apps is never gated.
  • Existing 0.2.x pairings and approvals migrate automatically.

Install

Requires a paired Heartwood signer (pair via Sapwood: Apps, Connect an app, scan the QR). Android 8.1+, no Google Play services.

Verify before installing (AppVerifier):

dev.forgesworn.cambium
9E:A1:88:EF:A9:01:5F:7E:7F:90:E1:88:8F:58:6F:52:7B:2A:0E:8A:6D:CD:B3:99:1E:41:FB:4F:14:EE:EF:C6

SHA-256 of cambium-0.3.0.apk: e0e0204d40e7b2668bb0ef03ef07d7b4aa06980af2e2b109153a76a299229b21

Track updates with Obtainium pointed at this repository.