Re: [gentoo-nfp] Developer Crypto Hardware (AGM)

[Michał Górny]

On Sun, 2018-08-19 at 22:06 +0000, Robin H. Johnson wrote:
> On Sun, Aug 19, 2018 at 09:36:42PM +0200, Michał Górny wrote:
> > On Sun, 2018-08-19 at 14:42 -0400, Aaron Bauman wrote:
> > > Gentoo-bug: https://bugs.gentoo.org/659620
> >
> > 1. Should we include all developers or only developers with gentoo.git
> > commit access?
>
> This is covered in my email response to b-man. Message-ID
> <robbat2-20180819T200416-417951123Z@××××××××××××××.net>
>
> > 2. Shouldn't we set some minimal time-as-a-dev for this?
>
> This is covered in my email response to b-man. Message-ID
> <robbat2-20180819T200416-417951123Z@××××××××××××××.net>
>
> > Alternatively, require developers to return the token upon termination
> > of developer status, with allowance that after X years as a dev
> > the token is considered scrapped and does not need to be returned.
>
> As Treasurer, the keys will remain the property of the Foundation.
> Return it if X less than 2.5 years (by which time it will at least 50%
> depreciated in value).
>
> I do expect at least one retiring dev to claim that they lost it to
> avoid returning it, but we'll be able to see by how (in)frequently it is
> used.

Shouldn't we then formally require him to reimburse the Foundation for
the loss?  I honestly doubt that we would really enforce that but it
might be legally safer to formally request that.

-- 
Best regards,
Michał Górny