Expand description
Trusted artifacts and dimension-tagged co-signatures (SIGNATIF §8).
A TrustedArtifact is the convergence point of independent
attestations: every CoSignatureBlock — regardless of trust
dimension, organization, or trust chain — signs the same
canonical payload hash. Partial attestation is not conforming, a
co-signature cannot be stripped without breaking self-description,
and each block binds to the artifact identifier so blocks cannot be
replayed onto a different artifact (the replay-protection
requirement).
Artifacts are living: dimension attestations accumulate over time
(TrustedArtifact::add_attestation) while the original canonical
payload hash stays fixed.
Structs§
- Artifact
Version - Semantic version of the artifact format.
- CoSignature
Block - One independent attestation on the artifact.
- Trusted
Artifact - A trusted artifact: payload + dimension attestations.