Lots of source control systems don&#x27;t offer that level of verification.  Even Git, with SHA-1 hashes everywhere, lets you claim to be anybody when you write a commit.  The only thing you can verify the origin of in Git is the author of a tag signature, for tags that are signed with a PGP key.