Private Provider v0.7.2 live 🔐📡
▪️Simply ask Pi to open the PR, file the issue, or add the label. Pi can't run ngit commands in the app - it writes the request, the app builds the command. You see the exact command and approve, Amber signs. Pi never sees your key!
▪️Why prompt injection can't turn Pi into a publisher: in Private Provider, Pi only output is small .ngit/pi-request.json of *parameters*. It never runs a command - and its sandbox never holds your signer. The app treats that file as untrusted input. Every field is shell-escaped by the app. Worst case is a rejected file. Never a signature.
▪️Now on ngit v3.0.3
https://npub1fetz9dt4eka56h0dpyly335v60mjf7k4gu2z7rqmptkz72e2pvhqvejzfa.nsite.lol/
▪️Simply ask Pi to open the PR, file the issue, or add the label. Pi can't run ngit commands in the app - it writes the request, the app builds the command. You see the exact command and approve, Amber signs. Pi never sees your key!
▪️Why prompt injection can't turn Pi into a publisher: in Private Provider, Pi only output is small .ngit/pi-request.json of *parameters*. It never runs a command - and its sandbox never holds your signer. The app treats that file as untrusted input. Every field is shell-escaped by the app. Worst case is a rejected file. Never a signature.
▪️Now on ngit v3.0.3
https://npub1fetz9dt4eka56h0dpyly335v60mjf7k4gu2z7rqmptkz72e2pvhqvejzfa.nsite.lol/
5👀1🧡1
