[completeshock]

"Co-authored-by" cannot be validated. Well, no commit can without signing (and there are issues even withthat).

[hzia]

How do you sign multiple devs on a commit though? Would it be a joint PGP key signed by all keys of all devs that helped with the PR?

[completeshock]

You can't.