Your identity

Oxygen signs what you publish. oxy identity create makes a key pair for you (a classical and a post-quantum half, so a signature holds up later) and records you as the author of your changes.

The secret key stays in your key directory; the hub only ever sees the public half.