For what it's worth, I am building a VCS that has close to what the article describes. Every user will have a heavily encrypted key store. When they interact w

For what it's worth, I am building a VCS that has close to what the article describes. Every user will have a heavily encrypted key store. When they interact with remote repos, they can have that key store uploaded, so remotes also act like remote password managers. When a key is compromised, the user just adds one, yo be signed by both the original and a key derived from the user's password. Then that key is stored, along with the entire key history, including when keys were changed. I might even be able to make the new key sign the latest commit (or one the user chooses) to mark which commit is the last good commit.