Source newsletter: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/

### 00:00 Intro to ep13

This episode opens on a week where commerce tooling, relay authentication, signer UX, and protected-event enforcement all moved forward together. The throughline is practical hardening: better machine interfaces, tighter auth boundaries, and fewer shortcuts around key management.

### 00:32 Shopstr and Milk Market Open MCP Commerce Surfaces

Shopstr and Milk Market both added MCP surfaces so agents can move through listings, checkout, and post-purchase actions without scraping a web UI. The segment covers agent discovery via `.well-known/agent.json`, API-key auth, seller-side actions, and why Bitcoin-native and mixed fiat flows can now be exposed to tools in a cleaner way.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#shopstr-and-milk-market-open-mcp-commerce-surfaces

- Shopstr PR #234: https://github.com/shopstr-eng/shopstr/pull/234

- Shopstr PR #236: https://github.com/shopstr-eng/shopstr/pull/236

- Shopstr PR #235: https://github.com/shopstr-eng/shopstr/pull/235

- Milk Market commit: https://github.com/shopstr-eng/milk-market/commit/da6c0b499494b4e4861c4ff8a220e066c46285b3

- Milk Market PR #10: https://github.com/shopstr-eng/milk-market/pull/10

- Milk Market PR #11: https://github.com/shopstr-eng/milk-market/pull/11

- NIP-99 topic: https://nostrcompass.org/en/topics/nip-99/

- NIP-47 topic: https://nostrcompass.org/en/topics/nip-47/

- NIP-60 topic: https://nostrcompass.org/en/topics/nip-60/

### 06:07 NIP-42 Relay Auth Across Bunker, Signer, and Relay

This chapter follows NIP-42 from bunker to signer to relay. OAuth Bunker improves delegated identity handling, Amber adds relay-specific auth approval for kind `22242`, and strfry starts enforcing NIP-42 and NIP-70 together so protected events cannot be trivially republished through reposts.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#nip-42-relay-auth-across-bunker-signer-and-relay

- OAuth Bunker commit f0c7683: https://github.com/flox1an/oauth-bunker/commit/f0c7683cb2374fd9a3ebd1b186055da8abd2c2ff

- OAuth Bunker commit 6b8796c: https://github.com/flox1an/oauth-bunker/commit/6b8796c6c59c7d48dc1ede92d6de6bf54feb56cc

- Amber v4.1.3-pre4: https://github.com/greenart7c3/Amber/releases/tag/v4.1.3-pre4

- Amber PR #317: https://github.com/greenart7c3/Amber/pull/317

- Amber PR #318: https://github.com/greenart7c3/Amber/pull/318

- strfry PR #156: https://github.com/hoytech/strfry/pull/156

- strfry PR #176: https://github.com/hoytech/strfry/pull/176

- NIP-42 topic: https://nostrcompass.org/en/topics/nip-42/

- NIP-70 topic: https://nostrcompass.org/en/topics/nip-70/

### 14:36 Notedeck Adds NIP-11 Relay Limits and Agentium Features

Notedeck now respects relay limits from NIP-11 documents, adding background fetching, retry backoff, and more polite outbox behavior. The conversation also covers Agentium's clipboard image paste, synced run configs, worktree creation, model picker, and new headless UI testing infrastructure.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#notedeck-adds-nip-11-relay-limits-and-agentium-features

- PR #1316: https://github.com/damus-io/notedeck/pull/1316

- PR #1312: https://github.com/damus-io/notedeck/pull/1312

- PR #1333: https://github.com/damus-io/notedeck/pull/1333

- PR #1336: https://github.com/damus-io/notedeck/pull/1336

- PR #1338: https://github.com/damus-io/notedeck/pull/1338

- PR #1339: https://github.com/damus-io/notedeck/pull/1339

- PR #1314: https://github.com/damus-io/notedeck/pull/1314

- NIP-11 topic: https://nostrcompass.org/en/topics/nip-11/

- NIP-33 topic: https://nostrcompass.org/en/topics/nip-33/

### 17:26 diVine Ships v1.0.6 with E2E Test Infrastructure and NIP-49 Import

diVine v1.0.6 adds NIP-49 account import, multi-account handling, desktop targets, and a locally backed drafts library. The segment also highlights Patrol-based end-to-end testing against a full Docker stack, faster video loading via MP4-first fetches, cached cold starts, and stricter handling of AI-generated content labels.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#divine-ships-v106-with-e2e-test-infrastructure-and-nip-49-import

- diVine v1.0.6: https://github.com/divinevideo/divine-mobile/releases/tag/1.0.6

- PR #1928: https://github.com/divinevideo/divine-mobile/pull/1928

- PR #2105: https://github.com/divinevideo/divine-mobile/pull/2105

- PR #2076: https://github.com/divinevideo/divine-mobile/pull/2076

- PR #2104: https://github.com/divinevideo/divine-mobile/pull/2104

- PR #2100: https://github.com/divinevideo/divine-mobile/pull/2100

- NIP-49 topic: https://nostrcompass.org/en/topics/nip-49/

- NIP-05 topic: https://nostrcompass.org/en/topics/nip-05/

### 21:02 Vector v0.3.2 Ships NIP-77 Negentropy Sync and MLS Improvements

Vector pushes faster catch-up for MLS groups with negentropy-style sync, while also rebuilding audio, adding spoilers, richer previews, mentions, muting, and cancellable uploads. The show notes focus on why Vector is drawing a hard line around MLS for groups instead of mixing in NIP-17 group events.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#vector-v032-ships-nip-77-negentropy-sync-and-mls-improvements

- Vector v0.3.2: https://github.com/VectorPrivacy/Vector/releases/tag/v0.3.2

- Commit b06adf4: https://github.com/VectorPrivacy/Vector/commit/b06adf4af2673fb5ac5add01356999ea70628eac

- Commit 2179a51: https://github.com/VectorPrivacy/Vector/commit/2179a51c0449b3a70663a1573195b7945adf58ba

- NIP-17 topic: https://nostrcompass.org/en/topics/nip-17/

- NIP-44 topic: https://nostrcompass.org/en/topics/nip-44/

### 23:21 Route96 v0.5.0 and v0.5.1

Route96 adds automated AI labeling, retroactive backfill, moderation queues, EXIF privacy rejection, perceptual hashing, and a machine-readable `SKILL.md` for agent tooling. This is one of the clearest examples this week of media infrastructure becoming more inspectable and more automation-friendly at the same time.

- Release v0.5.0: https://github.com/v0l/route96/releases/tag/v0.5.0

- Release v0.5.1: https://github.com/v0l/route96/releases/tag/v0.5.1

- PR #58: https://github.com/v0l/route96/pull/58

- Commit 97b00a3: https://github.com/v0l/route96/commit/97b00a39e27b07053c2ad335dbf475bacba57bf8

- NIP-96 topic: https://nostrcompass.org/en/topics/nip-96/

### 25:21 Samizdat v1.0.0-alpha

Samizdat ships its first Android alpha with native key storage, biometric unlock, deep-link handling, signer handoff, and a more native mobile shell around the long-form reader. The segment covers why NIP-55 signing matters here: publishing can stay delegated while local reading and account access remain simple.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#samizdat-v100-alpha

- Samizdat v1.0.0-alpha: https://github.com/satsdisco/samizdat/releases/tag/v1.0.0-alpha

- Commit d17308f: https://github.com/satsdisco/samizdat/commit/d17308f3c2e6020e14074fbb1c03a8f60f29a3e6

- Commit e29dab8: https://github.com/satsdisco/samizdat/commit/e29dab84f7b58edd621f7b86ed7ca6458f965614

- NIP-55 topic: https://nostrcompass.org/en/topics/nip-55/

### 31:41 Calendar by Form* v0.2.0

Calendar by Form* extends recurring-event handling for NIP-52 and keeps building on private-event sharing with NIP-59 gift wrap support. The practical story is steady app-layer progress on private calendaring rather than one-off demos.

- Release: https://github.com/formstr-hq/nostr-calendar/releases/tag/v0.2.0

- PR #38: https://github.com/formstr-hq/nostr-calendar/pull/38

- NIP-52 topic: https://nostrcompass.org/en/topics/nip-52/

- NIP-59 topic: https://nostrcompass.org/en/topics/nip-59/

### 32:35 Mostro v0.16.4

Mostro adds rating-event duration and expiration fields, configurable order expiration, and duplicate development-fee protection. This chapter focuses on how P2P Bitcoin trading apps keep moving from protocol novelty toward operational correctness.

- Release: https://github.com/MostroP2P/mostro/releases/tag/v0.16.4

- PR #625: https://github.com/MostroP2P/mostro/pull/625

- PR #612: https://github.com/MostroP2P/mostro/pull/612

- PR #614: https://github.com/MostroP2P/mostro/pull/614

- PR #622: https://github.com/MostroP2P/mostro/pull/622

### 33:22 Mostro Mobile v1.2.1

Mostro Mobile adds encrypted multimedia in dispute chat, terminal-state UI auto-close, QR-based NWC wallet import, French localization, and push notification handling. It also carries the Schnorr padding fix that was critical for signing reliability.

- Release: https://github.com/MostroP2P/mobile/releases/tag/v1.2.1

- PR #514: https://github.com/MostroP2P/mobile/pull/514

- PR #503: https://github.com/MostroP2P/mobile/pull/503

- Commit 12eaee4: https://github.com/MostroP2P/mobile/commit/12eaee4d154fa31b07f82b96819de520e825aee6

- PR #496: https://github.com/MostroP2P/mobile/pull/496

### 34:34 0xchat v1.5.4

0xchat focuses this release on Linux polish, image upload fixes, npub.cash integration, and less wasteful UI behavior. The removal of a pointless 3-second polling timer is a small change with big user-facing impact on desktop responsiveness.

- Release: https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.5.4-release

- PR #49: https://github.com/0xchat-app/0xchat-app-main/pull/49

### 35:40 Keep v0.6.0

Keep ships backup and restore, threshold-share-based nsec recovery, Rust-generated animated QR frames, wallet descriptor coordination, and a signing audit trail. The release closes with a move to MIT in v0.6.1, which changes the project's downstream reuse posture as well as its feature set.

- Release v0.6.0: https://github.com/privkeyio/keep-android/releases/tag/v0.6.0

- Release v0.6.1: https://github.com/privkeyio/keep-android/releases/tag/v0.6.1

- PR #184: https://github.com/privkeyio/keep-android/pull/184

- PR #187: https://github.com/privkeyio/keep-android/pull/187

- PR #188: https://github.com/privkeyio/keep-android/pull/188

- PR #189: https://github.com/privkeyio/keep-android/pull/189

- PR #191: https://github.com/privkeyio/keep-android/pull/191

### 36:33 njump v0.3.0

njump's v0.3.0 release updates its underlying nostr library and makes a breaking change to `note1` parsing. Short segment, but important for anyone relying on njump as a gateway into Nostr content.

- Release: https://github.com/fiatjaf/njump/releases/tag/v0.3.0

- njump: https://njump.me

### 36:57 Roadstr v0.1.1

Roadstr debuts with a map-based interface for decentralized road event reporting, using vector tiles from openfreemap.org. The discussion treats it as another example of Nostr identity and event distribution being used for domain-specific utility apps.

- Release: https://github.com/jooray/roadstr/releases/tag/v0.1.1

- openfreemap: https://openfreemap.org

### 39:52 Bitcredit v0.5.3

Bitcredit adds clearer payment-state fields to the API and fixes signing-address handling for anonymous signers. The segment connects this to the broader trend of Nostr transport getting embedded into business and finance software that is not primarily social.

- Release: https://github.com/BitcreditProtocol/Bitcredit-Core/releases/tag/v0.5.3

- PR #846: https://github.com/BitcreditProtocol/Bitcredit-Core/pull/846

- PR #849: https://github.com/BitcreditProtocol/Bitcredit-Core/pull/849

### 42:08 OpenChat v0.1.0-alpha.3

OpenChat adds Amber and NIP-46 signer support, moves MLS persistence deeper into the service layer, and expands its CI-built targets. This section highlights the steady growth of the Marmot and .NET stack outside the original Rust implementation orbit.

- Release: https://github.com/DavidGershony/openChat/releases/tag/v0.1.0-alpha.3

- Commit e568d97: https://github.com/DavidGershony/openChat/commit/e568d979fe15eead19172f2eb6f8cf26ca845247

- Commit 4720bc8: https://github.com/DavidGershony/openChat/commit/4720bc8625136a0d5b0e23322bc0c50cd80577e8

- NIP-46 topic: https://nostrcompass.org/en/topics/nip-46/

### 43:00 OpenSignal v1.0.0

OpenSignal packages trading-copilot logic, chart rendering, Nostr publishing, Blossom uploads, and AI inference hooks into a Kotlin Multiplatform release. The story here is less about a single feature and more about how far application specialization on Nostr has now spread.

- Release: https://github.com/turizspace/OpenSignal/releases/tag/v1.0.0

- NIP-96 topic: https://nostrcompass.org/en/topics/nip-96/

### 44:02 Formstr

Formstr's new signup flow uses NIP-49 to encrypt private keys client-side into `ncryptsec`, letting users log in with a password without installing a browser signer. The notes use this segment as a bridge into the NIP-49 deep dive later in the episode.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#formstr

- PR #434: https://github.com/formstr-hq/nostr-forms/pull/434

- Commit e9c4fd5: https://github.com/formstr-hq/nostr-forms/commit/e9c4fd5dadfa0b83f1e87d7596eaf35f9fdb7da8

- NIP-49 topic: https://nostrcompass.org/en/topics/nip-49/

### 44:25 Amethyst

Amethyst lands Namecoin-backed NIP-05 resolution with race-condition fixes, follow-list import support, and custom ElectrumX server settings. This segment emphasizes censorship-resistant identity verification and the practical complexity of resolving non-DNS identifiers on mobile.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#amethyst

- PR #1734: https://github.com/vitorpamplona/amethyst/pull/1734

- PR #1771: https://github.com/vitorpamplona/amethyst/pull/1771

- PR #1785: https://github.com/vitorpamplona/amethyst/pull/1785

- PR #1786: https://github.com/vitorpamplona/amethyst/pull/1786

- NIP-05 topic: https://nostrcompass.org/en/topics/nip-05/

### 45:23 nostr-idb

nostr-idb adds NIP-91 AND-filter support plus interface updates and a deadlock fix. It is a useful reminder that protocol merges only matter once local storage and query libraries actually implement the new semantics.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#nostr-idb

- PR #6: https://github.com/hzrd149/nostr-idb/pull/6

- PR #8: https://github.com/hzrd149/nostr-idb/pull/8

- Commit b49b3d3: https://github.com/hzrd149/nostr-idb/commit/b49b3d32c575ff8214dc3fb07675109c2a971972

- NIP-91 topic: https://nostrcompass.org/en/topics/nip-91/

### 46:43 Pensieve

Pensieve adds cache TTL enforcement and miss coalescing to keep expensive time-series endpoints from stampeding the server. The point here is infrastructure economics: efficient archive and analytics layers matter as Nostr datasets grow.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#pensieve

- PR #8: https://github.com/andotherstuff/pensieve/pull/8

### 48:24 Blossom

Blossom merged two BUD-11 auth clarifications that tighten upload verification and clarify request hashing across media-management flows. This closes out the project update section with a protocol-and-server cleanup that matters for anyone building on hosted media.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#blossom

- PR #91: https://github.com/hzrd149/blossom/pull/91

- PR #93: https://github.com/hzrd149/blossom/pull/93

### 49:41 NIP-91 (AND Operator for Filters) (PR #1365)

NIP-91 is now merged, giving tag filters intersection semantics instead of plain OR behavior. The segment explains why that matters for both relay efficiency and downstream libraries like nostr-idb.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#nip-updates

- PR #1365: https://github.com/nostr-protocol/nips/pull/1365

- NIP-91 topic: https://nostrcompass.org/en/topics/nip-91/

### 50:15 NIP-66 (Relay Discovery and Liveness Monitoring): Defensive Measures (PR #2240)

PR #2240 adds explicit warnings about stale, wrong, or malicious monitoring data so clients do not over-trust one feed and cut off healthy relay graph edges. This is effectively the defensive appendix that outbox benchmark results demanded.

- PR #2240: https://github.com/nostr-protocol/nips/pull/2240

- NIP-66 topic: https://nostrcompass.org/en/topics/nip-66/

### 50:50 NIP-39 (External Identities in Profiles): kind 10011 Registry Cleanup (PR #2256)

This cleanup aligns the spec directly with the kind `10011` registry Amethyst already implemented, tightening the gap between documentation and deployed client behavior.

- PR #2256: https://github.com/nostr-protocol/nips/pull/2256

- NIP-39 topic: https://nostrcompass.org/en/topics/nip-39/

### 51:26 NIP-70 (Protected Events): Reject reposts that embed protected events (PR #2251)

PR #2251 closes a loophole in protected events by requiring relays to reject reposts that carry protected content. The show notes connect this back to the earlier strfry implementation and the real meaning of relay-enforced protection.

- PR #2251: https://github.com/nostr-protocol/nips/pull/2251

- NIP-70 topic: https://nostrcompass.org/en/topics/nip-70/

- strfry PR #176: https://github.com/hoytech/strfry/pull/176

### 52:30 NIP-71 (Video Events): Multiple Audio Tracks (PR #2255)

This proposal adds alternate audio tracks and audio-only streams to video events, making multilingual video and podcast-like delivery much easier to express through one stable video object.

- PR #2255: https://github.com/nostr-protocol/nips/pull/2255

- NIP-71 topic: https://nostrcompass.org/en/topics/nip-71/

### 53:28 NIP-11 (Relay Information Document) and NIP-66 Relay Attributes (PR #2257)

PR #2257 proposes a structured `attributes` field for relay info documents, giving clients machine-readable metadata that goes beyond human description text. That fits neatly with this week's broader theme of turning implicit behavior into explicit interfaces.

- PR #2257: https://github.com/nostr-protocol/nips/pull/2257

- NIP-11 topic: https://nostrcompass.org/en/topics/nip-11/

- NIP-66 topic: https://nostrcompass.org/en/topics/nip-66/

### 54:11 NIP Deep Dive: NIP-49 (Private Key Encryption)

The NIP-49 deep dive explains how `ncryptsec` works: scrypt-based key derivation, XChaCha20-Poly1305 encryption, bech32 encoding, and a one-byte security-history flag. The conversation centers on where NIP-49 fits relative to plain `nsec` handling, NIP-46 remote signing, and Android signer delegation through NIP-55.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#nip-deep-dive-nip-49-private-key-encryption

- NIP-49 topic: https://nostrcompass.org/en/topics/nip-49/

- Formstr PR #434: https://github.com/formstr-hq/nostr-forms/pull/434

- nsec.app: https://nsec.app

- Alby Hub: https://github.com/getAlby/hub

- NIP-46 topic: https://nostrcompass.org/en/topics/nip-46/

- NIP-55 topic: https://nostrcompass.org/en/topics/nip-55/

### 59:17 NIP Deep Dive: NIP-70 (Protected Events)

The final segment walks through the `-` tag, the AUTH challenge flow, kind `22242` signed responses, relay-side enforcement, and the limits of what protected events can actually guarantee. It is a clean closing theme for the episode because it ties together bunker behavior, signer UX, relay policy, and repost enforcement.

- Newsletter section: https://nostrcompass.org/en/newsletters/2026-03-11-newsletter/#nip-deep-dive-nip-70-protected-events

- NIP-70 topic: https://nostrcompass.org/en/topics/nip-70/

- NIP-42 topic: https://nostrcompass.org/en/topics/nip-42/

- strfry PR #156: https://github.com/hoytech/strfry/pull/156

- strfry PR #176: https://github.com/hoytech/strfry/pull/176