For nm.debian.org, at 2021-09-03:
For the past 12 months, I have worked with Clay Stan on Deepin-related packages.
For this past work, Clay Stan sent mails using the email address firstname.lastname@example.org
which is the one they're using on nm.debian.org, and they signed their work and
email using a GPG key with fingerprint 4588 CB58 CB89 35FA C7DD 02D0 23C0 FC60 B040 BEC3.
I've made sure that they are able to decrypt encrypted messages sent to this key
and that they're able to sign messages with the same key.
Due to the long-term interactions we had, I'm convinced that Clay Stan as they
present themselves on nm.debian.org is the rightful owner of both email
email@example.com and GPG key 4588 CB58 CB89 35FA C7DD 02D0 23C0 FC60 B040 BEC3.