On 1/31/19 10:40 PM, Alec Warner wrote: >> In addition comes a better certainty about the UID used for copyright in >> signed-off-by, we as a distribution rely on this for both developers and >> external contributors, and we need to demonstrate that we have taken >> reasonable measures to ensure that what we add is unencumbered. >> > I assume this is where the mandatory bits come in (and obviously where all > of the exciting politicking will happen around who owns how to assess and > address risk to "gentoo" and what "gentoo" is and so forth.) > > To that end, is the WoT also mandatory for contributors? I didn't see > anything in the GLEP about it. It would certainly be interesting to discuss whether it makes sense to require contributors to be part of the strong set, indeed. -- Kristian Fiskerstrand OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3