portage.git should ensure that commits and pushes have an OpenPGP signature. Please enable the appropriate server-side git hooks.
commit e28681df8d018b4758dd02760222252611897d1c Author: Michał Górny <mgorny@gentoo.org> Date: Fri Jul 1 12:37:56 2016 proj/portage: Enable GPG commit signature verification, #586082 commit 040ecfb195c184a23d053981026ccfc86b32fe59 Author: Michał Górny <mgorny@gentoo.org> Date: Fri Jul 1 12:29:30 2016 proj/portage: Enable signed push requirement, #586082 Hopefully it will work. It may also not work or prevent everyone from committing. Enjoy!