Storage

I lean towards storing information in SQLite files, named after the project id they are for.

Then record: date CLA agreed, user id, user email, CLA revoked flag

The paper trail can be committed to a directory named after the project id along with the SQLite file, recording and safe-keeping those.

When not tracking any checks, those are read-only and don't required messy commits from pipelines.