It&#x27;s an interesting topic but I don&#x27;t have much to offer.<p>IPFS seems neat as an object store. Sign your commits and throw them into IPFS and you&#x27;re good? Given a persistent distributed object store, it seems less obvious how to publish projects, refs, and pull requests.<p>If you hear about &quot;Rails&quot;, you want to be able to find the actual consensus Rails repository master branch in a trusted way. Some semantic data on <a href="https:&#x2F;&#x2F;rails.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;rails.org&#x2F;</a> maybe? Then the namespace for repositories is just the DNS namespace... But that&#x27;s just one way of getting the data; any source you can verify should be fine. So a signed message by a trusted Rails maintainer published somewhere. I was imagining a kind of NNTP reflog with PGP signatures....