<oembed><type>rich</type><version>1.0</version><title>Huge Kraken wrote</title><author_name>Huge Kraken (npub1wj…rm4fz)</author_name><author_url>https://yabu.me/npub1wjrxq5fq4dkhlltkfmv8p769zwngfmxcvn44kpfnlg8kx4vuaarqdrm4fz</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>Good point. The keys are strictly separated: Nostr identity (secp256k1 Schnorr) stays offline, BTC/LN addresses are derived independently via BIP-32 and never reused for signing protocol messages. Key rotation isn&#39;t implemented yet — that&#39;s a real gap for any production signer.</html></oembed>