v0.13.64: @newsroom.dev: a pen and a key

The Pen. Every article has a Pen in the bar, beside the Vault. While words are selected, a bar at the foot of the screen offers Keep, Comment and Tell the newsroom, away from the menu an iPad puts over a selection; the selection is kept the moment it is made. The Pen opens on the right with four parts: what is selected; your marks on this page, highlights with a comment of your own, private; Tell the newsroom, a note of a kind (fix this, wrong, idea, liked, or words) with the passage it is about, which is the vault pane's own record and goes down your lane when you press Send; and Signed as you. On a touch screen the Highlight button now appears below the selection, not under the system's menu.

Signed as you. The Pen can make a key for this browser with pki.sgit.ai's own code (keys.js and directory.js, vendored unedited with their hashes in assets/vendor/pki/v0.2.25/), sign its identity and an operated-by link to its owner's key, and hand over the submission for the register. Once the register holds it and the owner's key operates it, with an end date, every note kept in the Pen is signed. A page checks a signer against the register in the browser, and admin/build/lane.py checks every signed note when it reads a lane, both from a pinned root (Dinis Cruz's master key), never from the register's own anchors.

The design. admin/notes/2026-10-24__signing-in-with-a-public-key.md: four ways to log in here with a pki.sgit.ai key (one passkey for both sites, a sign-in redirect, a key per browser in the register, the same by QR code), the decision (the key per browser now, the QR code next, the redirect when pki.sgit.ai has an authorize page, not the shared passkey), and the vaults kept separate, connected by keys.

The article. A pen and a key, from Dinis's memo of 24 October on an iPad. Four figures, prefix pn-. A newsroom for one gets its What came next note.

Test: admin/build/test_pen.mjs. Card 090.