2025-01-18 · Sofia Martins
Teaching signed commits without fear-mongering
Image unavailable
Signed commits show up in procurement questionnaires even when teams barely understand them. We introduce signing as a contract between engineering and risk: what it proves, what it does not prove.
Our labs use disposable keys and stress rotation rituals. We also discuss where server-side controls matter more than client-side hooks, so learners do not overfit on local tooling.
The final paragraphs outline how we coach managers to read coverage metrics without turning signing into a vanity scoreboard — compliance theater helps nobody.