January 2000: debsign

debsign is a mechanism to enforce security policies on packages. It allows you to create a set of policies which must be met by a package in order for dpkg to install it.

A policy is a combination of:

selection criteria to see if the policy should be used
verification rules