notify doctors work, audit work, new product advisory sprints

docs/operations/rekor-policy.md

@@ -184,6 +184,18 @@ attestor:
     # Rekor server URL (default: public Sigstore Rekor)
     serverUrl: "https://rekor.sigstore.dev"
 
+    # Log version: Auto, V1, or V2 (V2 uses tile-based Sunlight format)
+    version: Auto
+
+    # Log ID for multi-log environments (hex-encoded SHA-256)
+    logId: "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"
+
+    # Tile base URL for V2 (optional, defaults to {serverUrl}/tile/)
+    tileBaseUrl: ""
+
+    # Prefer tile proofs when version is Auto
+    preferTileProofs: false
+
     # Submission tier: graph-only | with-edges
     tier: graph-only
 
@@ -225,7 +237,9 @@ attestor:
 
 ## Related Documentation
 
+- [Rekor Verification Technical Design](../modules/attestor/rekor-verification-design.md) - Full technical design including v2 tile support
 - [Attestor AGENTS.md](../../src/Attestor/StellaOps.Attestor/AGENTS.md)
 - [Scanner Score Proofs API](../api/scanner-score-proofs-api.md)
 - [Offline Kit Specification](../OFFLINE_KIT.md)
 - [Sigstore Rekor Documentation](https://docs.sigstore.dev/rekor/overview/)
+- [C2SP tlog-tiles Specification](https://c2sp.org/tlog-tiles) - Tile-based transparency log format (v2)