The ngit action are done through the app and signed remotely with #Amber. This isolation firmly puts the human in manual control of signing code created by an agent. Each ngit action can be manually approved by your physical action in Amber and the agent can't access the key.
Here in Private Provider, Pi wrote code in a TEE, paid in #cashu from in app wallet, saved file to in app workspace repository with built in ngit ux, published to nostr, approved in Amber, Pi then builds APK, commit in workspace, sign in Amber, release, sign and view repo in app.
