Andrew Ardill [off-list ref] writes:

quoted

Starting from Git release v1.7.9, a contributor can add a signed tag to
the commit at the tip of the history and ask the integrator to pull that
signed tag. When the integrator runs `git pull`, the signed tag is
automatically verified to assure that the history is not tampered with.
In addition, the resulting merge commit records the content of the signed
tag, so that other people can verify that the branch merged by the
contributor was signed by the contributor, without fetching the signed tag

I think you mean to say 'the branch merged by the integrator was signed
by the contributor'.

Definitely. I'll update my local copy.

Thanks for spotting this.