@realcaseyrollins Signing is easy, it's verifying that isn't possible. You can give me a commit hash (which is comprised of all source code files plus commit history including authors and commit messages), but I can't confirm that the commit hash you gave me matches the code on your website.