Since Trustus.sol is using the ecrecover precompile, it could be nice to have a documentation/comment about the signatures being malleable
Or maybe use OZ's ECDSA.sol lib if it doesn't add too much overhead (I believe it rejects duplicate signatures?)