Claimed or Attested? A Commit-Signature Dataset and Identity Trust Tiers across the World of Code

Audris Mockus

An author string in a git commit is free text the committer typed, so identity resolution over a global commit corpus rests on a claim that nothing in the commit verifies. A crypto…