verifybinaries: fix trusted signature count #34889

1. 
   dplusplus1024 commented at 10:59 pm on March 21, 2026: contributor

   The threshold check currently counts both trusted and untrusted signatures. Count only trusted signatures toward the threshold.
2. verifybinaries: fix trusted signature count

   The threshold check currently counts both trusted and untrusted signatures. Count only trusted signatures toward the threshold.

   6a2998939a
3. 
   DrahtBot commented at 10:59 pm on March 21, 2026: contributor

   The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.

   Reviews

   See the guideline for information on the review process. A summary of reviews will appear here.

4. dplusplus1024 closed this on Mar 22, 2026

   ---

5. 
   dplusplus1024 commented at 3:28 am on March 22, 2026: contributor

   Closing this after taking a closer look at the verifier semantics. The implementation and surrounding messaging make it look like the threshold is supposed to apply only to trusted signatures: signatures are split into trusted and untrusted buckets, related variables are named accordingly, and the code emits messages about trusted sigs meeting the threshold. On further review, I now assume the current behavior is intentional, with trust surfaced separately in the output for operator review and the threshold based on good signatures overall. The existing variable names, messaging, and control flow are internally inconsistent enough that the current implementation reads as a logical error.
6. 
   fanquake commented at 5:50 am on March 22, 2026: member

   This is atleast the second time there has been confusion over this script, in as many months. So I think we probably need to do something here, to make the implementation less confusing.

Contributors
dplusplus1024 DrahtBot fanquake