Hello,
I noticed that the front page in https://asdf.common-lisp.dev/ claims that the latest version is 3.3.5 but the release tarball https://common-lisp.net/project/asdf/archives/asdf.tar.gz unpacks to asdf-3.3.6.
Also, do you sign the releases?
Regards, Nikolaos Chatzikonstantinou