+1 (non-binding) Verified the following:
- SHA-512 checksums, GPG signatures, and Helm provenance. - Source archive matches the signed release candidate tag. - Apache RAT: 132 approved, 0 unapproved, 0 unknown. - Helm lint, template rendering, certificate SAN checks, and Kubernetes schema validation. - Installation and same-version Helm upgrade on Kubernetes 1.32.2, using ZooKeeper and Oxia with internal mTLS. - Broker/proxy messaging, partitioned topics, and Functions. - Message and subscription recovery after metadata and broker pod replacement: all 13 remaining messages were received, with the backlog returning to zero. - Oxia filesystem package persistence and mTLS client authentication. Runtime tests used the CI configurations with monitoring disabled. Cross-version upgrades and NetworkPolicy enforcement were not tested. Thanks, void-ptr974
