A developer signature on the binary proves who published it, not that it was built from the public source code. In this session, we explore the approaches to verify opaque binaries in a fairly decentralised manner.

Maintainers are busy, and the wrong kind of help can cost them more than it saves. This talk shares practical habits for contributing to open source the way maintainers hope you will: reading the project first, asking before building, writing issues and PRs that are easy to review, responding well to feedback, and using AI tools responsibly, so your contributions get merged and you become someone projects want to keep.