For nm.debian.org, at 2026-05-23: For the past few months, I have worked with Brian Cosgrove on packaging clnkr. For this past work, Brian Cosgrove sent mails using the email address cosgroveb@gmail.com which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint 95FF E836 21AD DF94 0F73 00FC AA1F 6DCF 461A 82FD. An example of a contribution signed with that key can be found at: https://github.com/clnkr-ai/clnkr/commit/ebfc845f9803ae57a4605c4cf941d1405f104e8f I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Brian Cosgrove as they present themselves on nm.debian.org is the rightful owner of both email cosgroveb@gmail.com and GPG key 95FF E836 21AD DF94 0F73 00FC AA1F 6DCF 461A 82FD.