I was mistaken in saying that only a PMC can sign a release. Any committer may be a release manager, and sign the release.
In http://www.apache.org/dev/release-publishing.html#release_manager: "Any committer may serve as the manager of a release" Julian On Fri, Dec 6, 2019 at 9:41 AM Vladimir Sitnikov <sitnikov.vladi...@gmail.com> wrote: > > Enrico>AFAIK in all of the apache projects I am contributing to as > committer every > Enrico>committer can sign the artifacts and be release manager > > There existed META effort (which was hosted at > https://checker.apache.org/#META-files), however, it looks like > checker.apache.org was dropped recently by infra, so the future is not > clear. > META files described who must sign what so the release to be considered to > be an official one. > For instance, JMeter still has a META file that specifies who must sign the > releases: https://dist.apache.org/repos/dist/release/jmeter/META , > and there's a root file that specifies who signs per-project META files: > https://dist.apache.org/repos/dist/release/META/ROOT > > The current META/ROOT contains > > # pmc calcite [chair] francischuang > key bbe44e923a970ab7 signs calcite/META > > Vladimir
