[$] Attestation for kernel patches

The kernel development process is based on trust at many levels - trust indevelopers, but also in the infrastructure that supports the community. Insome cases, that trust may not be entirely deserved; most of us have longsince learned not to trust much of anything that shows up in email, forexample, but developers still generally trust that emailed patches will be whatthey appear to be. In his ongoing effort to bring more security to kerneldevelopment, Konstantin Ryabitsev has proposed apatch attestation scheme that could help subsystem maintainers verifythe provenance of the patches showing up in their mailboxes.