Both build and installed-system pacman configs now use 'SigLevel = DatabaseRequired PackageOptional' for [antergos-pkgs]. The repo DB is signed by the dedicated signing key (AA644A09...), which authenticates all packages via the checksums the signed DB carries. Keyring package updated to match.