Unsigned-by-choice collector: the stand + verifiable SHA-256 download (#25)

Why our process collector ships unsigned, and the substance we offer instead of a code-signing certificate.

- Blog post "A signature is a receipt, not a verdict": turns the Field Guide's thesis (the signing gate doesn't certify safety; every dangerous driver in it is validly signed) on Vera itself. …