Small, framework-free Go modules extracted from go-tool-base — each independently versioned, dependency-inverted, and usable on its own.
Every module lives at gitlab.com/phpboyscout/go/<name> with its own docs at <name>.go.phpboyscout.uk. Import only what you need; pull no framework weight you don't.
OpenPGP/WKD release signing & verification. A light crypto.Signer-based backend contract, the signing mechanics, and the verification trust model — no framework, no cloud SDK.
AWS KMS signing backend for signing — a KMS-held key as a crypto.Signer. Its own module so consumers that don't sign with KMS never inherit the AWS SDK.
go-tool-base's reusable packages are being extracted into this subgroup one at a time — chat, redact, controls, observability, and more are on the way.