I think this is a use case of signed commits. They would allow for verification of the commit's author's identity.