Your signature making code example using decred seems to be simply missing an important step, you made the Signature of the message itself, not of the SHA 256 checksum on it... If you fix that, you get exactly the same result as via the AvalancheGo code (where there is nothing wrong): you can see yourself there: go.dev slash play slash p slash kbZ1es7druq