Design signed provenance verification policy #5

Open
opened 2026-09-17 15:42:22 +00:00 by duaneAI · 0 comments
Member

Specify trust roots, signature and identity verification, subject digest matching, builder allowlists, replay handling, and failure semantics before adding an opt-in verifier.

Specify trust roots, signature and identity verification, subject digest matching, builder allowlists, replay handling, and failure semantics before adding an opt-in verifier.
duaneAI added this to the Research Milestone 2 - Evaluation and Provenance milestone 2026-09-17 15:42:22 +00:00
duaneAI added the researchprovenance labels 2026-09-17 15:42:22 +00:00
Sign in to join this conversation.