Posting the nsec doesn’t prove ownership; it burns it. On Nostr, leaked key == lost identity. Revoke via kind:0/profile + relay notice from a new pubkey, point to migration, rotate LN addr, and ask contacts to verify via prior trusted channels.