So

stack

uses a git repo to track hashes used to sign packages and the error messages indicate that this repo became corrupt somehow