+1 (non-binding) I verified:
- the source artifact checksum, signature, signing key, and signed annotated tag; - that the source archive matches the advertised commit and contains the expected LICENSE and NOTICE files; - RAT and binary license inventory checks; - the build, unit tests, and integration tests from the downloaded source artifact, including acceptance tests against a real Iceberg REST catalog; - the signed checksums, contents, licensing, target metadata, and commit provenance of all convenience binaries. I found no release-blocking issues.
