Definitely agreed re: the meaninglessness of my promises; if someone's threat model were to include that degree of trust in a complete stranger, then there woul

Definitely agreed re: the meaninglessness of my promises; if someone's threat model were to include that degree of trust in a complete stranger, then there would be no point in that person using encryption to begin with. Also agreed on all other counts; if all else failed, I have no doubt that a state actor could certainly extract our keys through targeted physical surveillance and/or force, which I don't think there's really a good workaround for short of raising our own army to protect a private bunker for air gapped release signing. What this first iteration of the air gapped environment is meant to accomplish is to simply make it that much harder. Sure, the CIA can still probably break into my home and set up a surveillance camera to steal the encryption passwords of my keys without my noticing, but what they will no longer be able to do is steal them by tampering with my laptop while my head's turned in broad daylight. As Cyph continues to grow as a company, we expect to have the resources to implement increasingly sophisticated OpSec measures.