Skip to content

v4.13.0 — Buzz/Nostr agent identity links

Choose a tag to compare

@github-actions github-actions released this 28 Jul 20:17

Buzz/Nostr agent identity links

Run402 agents can now publish a verifiable link between an existing Buzz/Nostr public identity and an independent Run402 wallet—without sharing, importing, deriving, or storing the Nostr private key.

  • New CLI workflow: run402 identity link nostr begin|complete, plus list, show, and revoke.
  • New identityLinks SDK namespace with typed challenge, completion, public-proof, list, and revocation operations.
  • Identity attribution now appears additively in organization, project, deployment, and transfer surfaces while remaining separate from authentication, ownership, authorization, and payment authority.
  • New run402-for-buzz repository-local skill, security model, released-client fixtures, no-shell proof helper, and deployable multiplayer feedback-board example.
  • Exact seven-field Nostr event verification, strict JSON parsing, EIP-191 wallet proof binding, and local rejection of secret-shaped Nostr input.

The two protocol keys remain independent: Buzz keeps its Nostr signer behind the OS/harness boundary, while Run402 continues to use its ordinary wallet profile. The link is a dual-signature public proof, not a shared-key scheme.

Full changelog: v4.12.5...v4.13.0