[ forgesworn/kintrinsic ] charterd 0.8.1: the apt source is written by postinst, not shipped as a conffile
A conffile meant a hand-made source differing by one byte made dpkg prompt, and the guardian-driven self-update has no one to answer: the package was left unpacked. Now postinst installs the source only when none exists and never prompts or fails over it; postrm removes it on remove or purge only while it is still byte-identical to what postinst wrote, so a removed package never leaves a source whose keyring is gone. Every directory in the package is 0755 whatever the build umask.
https://github.com/forgesworn/kintrinsic/commit/85976c611457d001f34b1fab7639967c487a9d7d