Bryan --
You should sign the ISO.
I recommend using one or more of your PGP keys. You have at least TWO on the better-known key servers.
(And you should get those keys cross-signed. I can offer suggestions and help.)
My own key (and email address) is here ...
https://github.com/openmainframeproject/wg-ztrust/blob/main/pgp/all/0x96af6544edf138d9-rmt@casita.net-public.asc
Bryan --
You should sign the ISO.
I recommend using one or more of your PGP keys. You have at least TWO on the better-known key servers.
(And you should get those keys cross-signed. I can offer suggestions and help.)
My own key (and email address) is here ...
https://github.com/openmainframeproject/wg-ztrust/blob/main/pgp/all/0x96af6544edf138d9-rmt@casita.net-public.asc