@ryjones
Whilst web commits can have an enforce signoff, I've always previously used the DCO app to enforce regular commit signoff.
What is the current LF setup? I presume we need this app installed at the org level & ensure it's setup for each project under PQCA?