-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

For nm.debian.org, at 2026-05-23:
For the past few months, I have worked with Brian Cosgrove on packaging clnkr.

For this past work, Brian Cosgrove sent mails using the email address cosgroveb@gmail.com
which is the one they're using on nm.debian.org, and they signed their work and
email using a GPG key with fingerprint 95FF E836 21AD DF94 0F73  00FC AA1F 6DCF 461A 82FD.
An example of a contribution signed with that key can be found at:
https://github.com/clnkr-ai/clnkr/commit/ebfc845f9803ae57a4605c4cf941d1405f104e8f

I've made sure that they are able to decrypt encrypted messages sent to this key
and that they're able to sign messages with the same key.

Due to the long-term interactions we had, I'm convinced that Brian Cosgrove as they
present themselves on nm.debian.org is the rightful owner of both email
cosgroveb@gmail.com and GPG key 95FF E836 21AD DF94 0F73  00FC AA1F 6DCF 461A 82FD.
-----BEGIN PGP SIGNATURE-----
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=qwTc
-----END PGP SIGNATURE-----