sign

Overview ¶

Package sign is the gtb-only `gtb sign` command. Produces an ASCII-armored OpenPGP detached signature over a single input file using a `crypto.Signer` from the pkg/signing backend registry and an existing armored OpenPGP public key as the identity source.

Lives under `internal/cmd/` rather than `pkg/cmd/` because release- binary signing is a framework-author concern, not a framework- consumer concern.

See docs/development/specs/2026-06-09-sign-command.md.