[gdhdjdvr]

So what you are talking about is gpg signed git commits and a private ci doing the building...?

[williamcotton]

That’s one way to do it!

For a public project you would only want the builds to be propagated out to other developers once the changes had been approved and then merged into a branch that triggers the CI.