Re: verify signature hook

shawn wilson [off-list ref] writes:

How do I complain when a commit/merge/tag/etc aren't signed?

At which point?  A natural place would be to detect this just before
accepting a suspicious history being pushed in pre-receive hook, I
think.