Hi, > However, ... this would mean that every time you built a package > locally as part of regular development it would emit this tag. Would it be acceptable to generate the tag for bad distribution in d/changelog only when the *.changes file is signed (if it is present)? That should bypass interim packages produced locally but catch those intended for upload. Kind regards, Felix