Layered, DANE/TLSA-inspired trust model for CI supply-chain (GitHub Actions) pinning: trust-anchor + provenance/key + leaf-exact layers, vs flat recursive SHA-pinning.
rust open-source dane policy-as-code github-actions compliance-automation supply-chain-security hyperpolymath epistemic-infrastructure epistemic-computing veridical-computing equivalence-aware-computing typed-provenance provable-governance explicit-trust
-
Updated
Oct 1, 2026 - Just