Cold Root Identity v0.1.0 is live.
Nostr was never meant to run long term identities off a hot private key sitting inside a mobile app.
This repo ships a clean model that fixes it without changing the protocol:
offline root key
-> deterministic epoch keys
-> signed lineage event
-> clients follow rotations safely
All using standard NIP-01 events and ed25519 signatures.
No relay changes. No NIP changes. Just better key hygiene.
Spec, docs, test vectors, and a working Python CLI are here:
https://github.com/GHOST-UntraceableDigitalDissident/cold-root-identity
If you’re a client dev, this gives you everything you need to support safe identity rotation today.
GHOST
npub18d…lh8x3
2025-12-08 19:35:20 UTC
Author Public Key
npub18dlusgmprudw46nracaldxe9hz4pdmrws8g6lsusy6qglcv5x48s0lh8x3Published at
2025-12-08 19:35:20 UTCEvent JSON
{
"id": "7d6c884790580d1e024487bdae3a6349149702b62484bbb3c7b6caa082371259",
"pubkey": "3b7fc823611f1aeaea63ee3bf69b25b8aa16ec6e81d1afc39026808fe194354f",
"created_at": 1765222520,
"kind": 1,
"tags": [
[
"r",
"wss://hist.nostr.land/"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://relay.damus.io/"
],
[
"r",
"wss://nostrcheck.me/relay"
]
],
"content": "Cold Root Identity v0.1.0 is live.\n\nNostr was never meant to run long term identities off a hot private key sitting inside a mobile app. \n\nThis repo ships a clean model that fixes it without changing the protocol:\n\noffline root key\n-\u003e deterministic epoch keys\n-\u003e signed lineage event\n-\u003e clients follow rotations safely\n\nAll using standard NIP-01 events and ed25519 signatures.\nNo relay changes. No NIP changes. Just better key hygiene.\n\nSpec, docs, test vectors, and a working Python CLI are here:\n\nhttps://github.com/GHOST-UntraceableDigitalDissident/cold-root-identity\n\nIf you’re a client dev, this gives you everything you need to support safe identity rotation today.",
"sig": "cc66ce2f5f799aee42dd51c3ac6e70a8c63e10c45133dda42e25fb3d016786f0f6877251647d6ee8934881b101bf051b2de9253584ecb28daa3e3afd8e269c76"
}