See the other comment, the idea is that the person producing the binary signs a version as an exemplar of sorts. Also there’s no need to limit the publishing o

See the other comment, the idea is that the person producing the binary signs a version as an exemplar of sorts. Also there’s no need to limit the publishing of unsigned packages at first, there needs to be a transition period. The problem is that if no one makes the hard decision to make this a priority then it never becomes one and we keep operating on hope and sheer luck. Hope any luck definitely have worked great thus far but maybe we can work differently going forward