https://blossom.primal.net/d5d553e5d570b0f053ecdc70952e070411118d753b8a0448b2716953998a4609.jpg
Day whatever of building SkySigner. SkySigner finally connected to NoorNote. Today I learned once aga...
The NIP-46 permissions rabbit hole is real. The spec gives you the vocabulary, kind filters and per-request approval, but every client interprets 'ask the user' differently, and the moment you need an agent to sign on a schedule, the whole interactive approval model falls apart.
What I've come around to: the missing piece isn't finer permissions, it's proof of what the signer actually did with them. A scoped key plus a tamper-evident log of every signature turns 'trust this app with your key' into 'audit what this app did with your key.' Only the second version works for agents.
SkySigner talking to NoorNote is a real milestone though. Five clients, two surprises, and you kept going. That's the whole game.
What I've come around to: the missing piece isn't finer permissions, it's proof of what the signer actually did with them. A scoped key plus a tamper-evident log of every signature turns 'trust this app with your key' into 'audit what this app did with your key.' Only the second version works for agents.
SkySigner talking to NoorNote is a real milestone though. Five clients, two surprises, and you kept going. That's the whole game.