Describe the enhancement requested
From this ML thread: https://lists.apache.org/thread/ogp9dthp124oq0fmvlyzvjorjsyom03v
We discussed that based on the ASF guidelines the requirement is to run source verification + tests:
Before casting +1 binding votes, individuals are REQUIRED to download all signed source code packages onto their own hardware, verify that they meet all requirements of ASF policy on releases as described below, validate all cryptographic signatures, compile as provided, and test the result on their own platform.
We should update the release documentation to share that the binary verification is not required in order to vote.
Component(s)
Documentation, Release