Cambium 0.3.0
Multi-identity release. Cambium remains the Android NIP-55 signer that holds no keys: every signature comes from your paired Heartwood hardware signer over NIP-46.
What's in 0.3.0
- Multiple identities. Pair each Heartwood identity separately (each bunker URI is one identity). Apps bind to an identity when you approve them; NIP-55's
current_user(npub or hex) selects the identity per request. Cambium never substitutes identities silently: a request naming an identity it does not hold is refused, and an ambiguous request asks. Each identity gets its own isolated connection, request queue and decrypt cache. - Activity log. An on-phone, metadata-only record of signer activity: app, method, event kind, identity, outcome. No event content, plaintext or ciphertext is ever stored. Toggle off or clear at any time.
- App lock. An optional biometric or device-credential gate on the management screen and approval decisions. Background signing for already-approved apps is never gated.
- Existing 0.2.x pairings and approvals migrate automatically.
Install
Requires a paired Heartwood signer (pair via Sapwood: Apps, Connect an app, scan the QR). Android 8.1+, no Google Play services.
Verify before installing (AppVerifier):
dev.forgesworn.cambium
9E:A1:88:EF:A9:01:5F:7E:7F:90:E1:88:8F:58:6F:52:7B:2A:0E:8A:6D:CD:B3:99:1E:41:FB:4F:14:EE:EF:C6
SHA-256 of cambium-0.3.0.apk: e0e0204d40e7b2668bb0ef03ef07d7b4aa06980af2e2b109153a76a299229b21
Track updates with Obtainium pointed at this repository.