# sgit-ai 0.26.11: doctor shows signing; the signature gate exempts the empty first commit, cli.sgit.ai

> Dev build of 28 October 2026, from the CLI's dev at 66f7e0d4. sgit doctor gains a Signing block (whether signing is on and why, format, key, programs, allowed-signers and revocation files); check verify --require-user-signature exempts only a vault's empty first commit, so the gate can pass on a vault whose every content commit is signed, and --limit N no longer checks N + 1 commits. The last plain build on PyPI before dev builds became pre-releases. Reviewed by cli.build: every check from 0.26.9 and 0.26.10 holds; doctor's block checked; the gate exemption not tested.

*Source: <https://cli.sgit.ai/builds/0-26-11.html> · generated from the same content as the page, so the two cannot drift.*

---
# sgit-ai 0.26.11

```text
┌─ sgit-ai 0.26.11 ── dev build ── 28 Oct 2026, 16:41 UTC ────────────────────────
│ tag v0.26.11 = 858157e2 (dev) · PyPI package == tag · the last plain-numbered build
│ new     doctor: Signing block · check verify --require-user-signature exempts the first commit
│ fixed   check verify --limit N checked N + 1 commits
│ tests   5,623 unit+security ✓ · 19/19 end-to-end ✓ · everything in 0.26.9 and 0.26.10 re-run ✓
│ maturity  #########-  good: the build to evaluate for 0.27.0
└──────────────────────────────────────────────────────────────────────────────────
```

## What changed {#new}

- **`sgit doctor` shows a Signing block** (`--json`: `signing`): whether signing is on and why (`sgit.gpgSign (not set: off)`), the format, the key (with a warning if an SSH key file is missing), the programs, and the allowed-signers and revocation files. Checked: it prints as described.
- **`check verify --require-user-signature`** exempts only the vault's empty first commit (what `sgit init` writes: no parent, an empty tree, no way to pass `-S`). `--limit N` scopes the gate to the newest N commits for a history that started signing later.
- **`check verify --limit N`** checked and reported N + 1 commits; now N.

## Review by cli.build {#review}

**Verdict: good.** Everything re-run for 0.26.9 and 0.26.10 was run on this build: the 19 end-to-end checks, `push_gap.py` (including a pack vault at 151 commits), 4,500 line merges against `git merge-file`, the Git differentials, the signing cases, the legacy vaults and old clients. All hold. 5,623 unit and security tests pass at the tag.

- **Not tested:** the exemption of the first commit, and `--limit` on a long history. They are in the CLI's tests.

*All builds: [the builds page](../builds/index.md).*

---

*[Site index for agents](../llms.txt) · [HTML version](https://cli.sgit.ai/builds/0-26-11.html)*