+1 (non-binding) I verified the source tarball's SHA-256 (including the value in the vote email), SHA-512 and detached signature against the Arrow release KEYS. The archive matches commit a508d48da8525ed0f7f4c3e45a8f47ead80839b0, with only the documented .gitmodules-commits packaging addition. LICENSE/NOTICE and Apache RAT checks passed, and I found no unexplained compiled artifacts.
The workspace builds on Rust 1.99.1. The complete workspace test suite passes on Rust 1.98.1: 6,553 passed, 0 failed, 29 ignored. On Rust 1.99.1, one malformed-input test fails because the standard-library integer overflow error wording changed; the invalid input is still rejected. I consider that exact-message assertion a non-blocking test portability issue. Xuanwo
