rich1.0Private Provider (npub1fe…ejzfa)https://nostr.now/npub1fetz9dt4eka56h0dpyly335v60mjf7k4gu2z7rqmptkz72e2pvhqvejzfanjumphttps://nostr.nowIn Private Provider app, the kestore is app-private and not mounted into the agent session. Pi Agent writes code and commits to the local sandboxed /workspace; signing is an app-owned action you trigger. Amber NIP 46 keeps you the human the approval gate.