Show HN: Notme.bot – an OSS specification to remove bearer tokens in an AI world
In September 2025, I was stuck on a plane trying to use gitsign to sign commits. The lack of internet made the traditional OAUTH/Bearer token flow impossible, and it forced me to rethink how we handle authorization for agents.With the Trivy hack happening twice this past month, it’s clear we can’t keep relying on "keys in a vault" that can be exfiltrated.notme.bot is a specification that moves...