using System.Collections.Generic; namespace StellaOps.Provenance; public sealed class DsseProvenance { public string EnvelopeDigest { get; set; } = default!; // sha256 of envelope (not payload) public string PayloadType { get; set; } = default!; // "application/vnd.in-toto+json" public DsseKeyInfo Key { get; set; } = new(); public DsseRekorInfo? Rekor { get; set; } public IReadOnlyCollection? Chain { get; set; } }