v4.13.0 — Buzz/Nostr agent identity links
Buzz/Nostr agent identity links
Run402 agents can now publish a verifiable link between an existing Buzz/Nostr public identity and an independent Run402 wallet—without sharing, importing, deriving, or storing the Nostr private key.
- New CLI workflow:
run402 identity link nostr begin|complete, pluslist,show, andrevoke. - New
identityLinksSDK namespace with typed challenge, completion, public-proof, list, and revocation operations. - Identity attribution now appears additively in organization, project, deployment, and transfer surfaces while remaining separate from authentication, ownership, authorization, and payment authority.
- New
run402-for-buzzrepository-local skill, security model, released-client fixtures, no-shell proof helper, and deployable multiplayer feedback-board example. - Exact seven-field Nostr event verification, strict JSON parsing, EIP-191 wallet proof binding, and local rejection of secret-shaped Nostr input.
The two protocol keys remain independent: Buzz keeps its Nostr signer behind the OS/harness boundary, while Run402 continues to use its ordinary wallet profile. The link is a dual-signature public proof, not a shared-key scheme.
Full changelog: v4.12.5...v4.13.0