Oxygen signs what you publish. `oxy identity create` makes a key pair for you (a classical and a post-quantum half, so a signature holds up later) and records you as the author of your changes.
4
5
The secret key stays in your key directory; the hub only ever sees the public half.