[CentOS-devel] srpms for RHEL 7

[Connie Sieh]

In the expected place for srpms for RHEL7 there is a README

ftp.redhat.org:/redhat/linux/enterprise/7Server/en/os/README

It's contents are

----------------------------------------------------------------------------
Current sources for Red Hat Enterprise Linux 7 have been moved to the 
following
location:

https://git.centos.org/project/rpms
----------------------------------------------------------------------------

Who/what is populating this area?

How are updates to packages handled?  Do they go straight to 
https://git.centos.org/project/rpms/ as the updates are published by 
RedHat?

Does CentOS modify any of these packages?

Since it is implied that this "represents" the "srpm" for a given RHEL 
package (given the above README from ftp.redhat.com) how do I know it has 
not been tampered with?

-Connie Sieh