Osiris Schedulehow often, not just how Everything this involves, sorted by how frequently you actually do it
Schedule › When something changes

A key change is announced

wait several days

The hardest case on this site, because it attacks the one thing every other page tells you to rely on.

Osiris addresses

Three published addresses for the same market. Copy rather than retype.

osiriseultmx3so5ef6ayasy4kdyekbywr7pyggpmjazeogxoyaodsyd.onion
osirislivpetlbabbl3zzqhupurfkxxbzbheu3bkrshkaiwg2hcxbyqd.onion
osirisydmlx47esm6ylhzhtnjrucgnymi7beqoyzze5jn3opbr3zy4id.onion

This list is published, not monitored. An address that opens is not an address that is genuine, and the check that settles it belongs to the every time list.

Fires when
A notice claims the signing fingerprint has changed.
First move
Nothing at all. Keep using the pin you have.
What settles it
Consistency across independent places over several days. No single message can.
What never settles it
A signature on the notice itself, because anyone holding the old key could produce one.
The mistake
Acting inside the stated period. Nothing about a key change requires it.

Why this one is genuinely hard

It is self undermining. Anyone able to compromise the old key can sign a handover with it, so a valid signature on a rotation notice proves less than a valid signature normally does. And a real key change does have to happen somehow, so refusing all of them is not a workable policy either.

This is the one place where the confident advice everywhere else on this site runs out, and saying so is better than pretending otherwise.

The honest answerNo single message settles a key change. What settles it is agreement across sources that would have to be compromised separately, accumulating over days rather than minutes.

What to do

  1. Do nothing immediately. Nothing about a key change requires action within an hour, a day, or a week. Pressure to act sooner is the tell.
  2. Keep using the old pin. If material still verifies against it, the old key is still in use and the notice is at best premature.
  3. Wait several days, then check independent places. Three pages by one operator count as one source.
  4. Let agreement accumulate. A real change shows up in more than one place, persists, and is reflected wherever the old fingerprint appeared.
  5. Treat a single source claiming a change as no evidence, however official it looks or however well it explains itself.

The variant that catches people

A notice that does not announce a rotation at all, and simply offers a key alongside something signed by it, with instructions for checking one against the other. Everything is internally consistent because one party produced all three, and internal consistency is free for a forger. That is the whole reason pinning is a separate task done once, from sources that had nothing to do with the page in front of you.