737 B
737 B
2025-10-29 – Export Center provenance/signing doc
Summary
- Authored
docs/export-center/provenance-and-signing.md, covering manifest/provenance artefacts, cosign/SLSA signing pipeline, verification workflows (CLI/CI/offline), and compliance checklist. - Cross-linked the new guide from the docs index (
docs/README.md) and referenced outstanding CLI automation (CLI-EXPORT-37-001) to keep verification guidance aligned with upcoming tooling.
Follow-ups
- Revisit once
CLI-EXPORT-37-001lands to confirm command names/flags and update the verification section if necessary. - Sync with DevOps (
DEVOPS-EXPORT-37-001) after dashboards/alerts ship to embed direct links in the failure handling section.