aiolabs/lnbits #9 + #18 are no longer in-flight; aiolabs/nsecbunkerd
deploys live from dev with sign-time TTL+revoke (#27), windowed
usage caps (#34), hard-reject on lapsed binding (#38), and a full
NDK -> nostr-tools transport port (#43/#45/#47). §7.2 now mandates
sign-time lifecycle enforcement; §7.3 lists expiresAt + usage caps
as part of the binding artifact; §12 swaps the upstream link for
the aiolabs fork and adds the never-full-wipe nsecbunker.db
operational hazard.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>