For nm.debian.org, at 2021-09-12: For the past 3 months, I have worked with Nkwuda Sunday Cletus on javascript packages and yarn-plugin-apt as part of Outreachy. For this past work, Nkwuda Sunday Cletus sent mails using the email address nkwudasonnie@yahoo.com and recently started using sonnietech@disroot.org which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint 688D CAA6 B9C9 D63F 6AD4 B1DF 64C7 0881 4523 D373. Additionally we have been interacting over matrix all through out the outreachy internship period using @sonnie:matrix.org They been signing commits using the same gpg key and I cross verified the email change and encryption via matrix chat. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key (I confirmed this using matrix chat). Due to the long-term interactions we had, I'm convinced that Nkwuda Sunday Cletus as they present themselves on nm.debian.org is the rightful owner of both email sonnietech@disroot.org and GPG key 688D CAA6 B9C9 D63F 6AD4 B1DF 64C7 0881 4523 D373.