FWIW, thanks to everyone involved, including @kit-ty-kate @mseri @raphael-proust @shonfeder, also earlier work by @AltGr and @cemerick. This has been a long journey (> 4 years), including discussions in https://discuss.ocaml.org/t/opam-repository-security-and-data-integrity-posture/ and Stronger checksums · Issue #17315 · ocaml/opam-repository · GitHub
I’m grateful we passed the finish line and can now realize further improvements. No need to look back.