For nm.debian.org, at 2026-06-09: For the past 36 months, I have worked with Ivan Hu on acpica-unix. For this past work, Ivan Hu sent mails using the email address ivan.hu@canonical.com which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint AFAA 7BBA 1237 9356 93A2 0DD1 BD22 5722 BB40 051B. Examples of those mails and contributions signed with that key are visible here https://launchpad.net/~ivan.hu I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Ivan Hu as they present themselves on nm.debian.org is the rightful owner of both email ivan.hu@canonical.com and GPG key AFAA 7BBA 1237 9356 93A2 0DD1 BD22 5722 BB40 051B.