That was my thought at first as well, but see the release approval
policy <https://www.apache.org/legal/release-policy.html#release-approval>:
/Before casting +1 binding votes, individuals are REQUIRED to
download all signed source code packages onto their own hardware,
verify that they meet all requirements of ASF policy on releases as
described below, validate all cryptographic signatures, compile as
provided, and test the result on their own platform./
Given that, I believe our total is still 3 binding +1s and 6 non-binding
+1s.
Related discussion in chat (deep in a 1.13.0 thread)
<https://mifos.slack.com/archives/C028634A61L/p1760569267218199?thread_ts=1760292408.958529&cid=C028634A61L>.
