Cambium 0.4.0
Cambium 0.4.0 adds NIP-55 website signing with explicit one-shot approval and fixes the specification's minimal event shape.
- Websites can request signatures through validated
nostrsigner:callbacks without inheriting native-app permissions. - Events containing only
kindandcontentnow sign correctly. Cambium supplies the paired NIP-46 identity, current timestamp, and empty tags before passing the event to rust-nostr. - Native rust-nostr instrumentation is now a required CI gate.
Verified end to end with Cambium, Sapwood and a real Heartwood signer. The returned event preserved the requested kind and content, used the paired identity, included the required defaults, and passed Schnorr signature verification.
Verify before installing with AppVerifier:
dev.forgesworn.cambium
9E:A1:88:EF:A9:01:5F:7E:7F:90:E1:88:8F:58:6F:52:7B:2A:0E:8A:6D:CD:B3:99:1E:41:FB:4F:14:EE:EF:C6
SHA-256 of cambium-0.4.0.apk: 07e8de9a8cf78bfa6aec71d602df71b708bc80f0ba0233932b594e2a8dd67e88