For nm.debian.org, at 2025-08-20: For the past X months, I have worked with YUCHIN TSAI on XXX and YYY. For this past work, YUCHIN TSAI sent mails using the email address tlinux.tsai@gmail.com which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint 280C 3FF5 2B9F 785C 78CE ABAA A235 AC2F 68CD F01D. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that YUCHIN TSAI as they present themselves on nm.debian.org is the rightful owner of both email tlinux.tsai@gmail.com and GPG key 280C 3FF5 2B9F 785C 78CE ABAA A235 AC2F 68CD F01D.