design: should --verify exit non-zero when the signing key is revoked? #16

threadsafety commented 2026年05月08日 15:18:10 +02:00

verify() in sign.rs prints a warning when the signer key is revoked but still returns Ok(true/false), so rpg --verify exits zero. The question: should verifying against a revoked key be a hard failure (non-zero exit, Err) or remain a warning? Hard failure matches the intent of revocation; a warning preserves compatibility for scripts that parse output text.

verify() in sign.rs prints a warning when the signer key is revoked but still returns Ok(true/false), so rpg --verify exits zero. The question: should verifying against a revoked key be a hard failure (non-zero exit, Err) or remain a warning? Hard failure matches the intent of revocation; a warning preserves compatibility for scripts that parse output text.