The Accounts parity group (tokens and account export stay SSH-only by design):
- Account screen off the dashboard toolbar: SSH keys with add-by-paste (full|git scope) and confirmed removal, PGP keys with armored paste and UID display, email add + verification code
- Key material travels as raw stdin (keys add / pgp add read bare stdin — no --file -); public keys are not secrets
- Exit-2 policy refined: generic everywhere, verbatim on this one screen where it validates pasted content
- Smoke-caught defect fixed: feedback used to render at the list top, invisible under the keyboard while using the email fields; it now sits beside the actions
126 unit tests green. testAccountFlows green against gitbay.org, state-neutral: real keys rendered, invalid-key and bad-code refusals surfaced.
Ref #11