10 lines
		
	
	
		
			737 B
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			10 lines
		
	
	
		
			737 B
		
	
	
	
		
			Markdown
		
	
	
	
	
	
| # 2025-10-29 – Export Center provenance/signing doc
 | ||
| 
 | ||
| ## Summary
 | ||
| - Authored `docs/export-center/provenance-and-signing.md`, covering manifest/provenance artefacts, cosign/SLSA signing pipeline, verification workflows (CLI/CI/offline), and compliance checklist.
 | ||
| - Cross-linked the new guide from the docs index (`docs/README.md`) and referenced outstanding CLI automation (`CLI-EXPORT-37-001`) to keep verification guidance aligned with upcoming tooling.
 | ||
| 
 | ||
| ## Follow-ups
 | ||
| - [ ] Revisit once `CLI-EXPORT-37-001` lands to confirm command names/flags and update the verification section if necessary.
 | ||
| - [ ] Sync with DevOps (`DEVOPS-EXPORT-37-001`) after dashboards/alerts ship to embed direct links in the failure handling section.
 |