For nm.debian.org, at 2026-08-16: I met Luke Yasuda in DebConf26 in Argentina. We have a good conversation on bazel and mozc related stuff. For this past work, Luke Yasuda sent mails using the email address jing@jing.rocks which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13A1 1EFC. Examples of those mails and contributions signed with that key are visible here https://bugs.debian.org/1142751 I've signed Luke Yasuda's key and checked the ID of Luke Yasuda. All looks good to me. And I'm using caff to send Luke Yasuda the encrypted mail for the signature. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the interactions we had, I'm convinced that Luke Yasuda as they present themselves on nm.debian.org is the rightful owner of both email jing@jing.rocks and GPG key 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13A1 1EFC.