Tag
attestation
- Apr 18, 2026 Verifying Provenance by Rebuilding What an independent rebuild proves, which nondeterministic packaging details decide whether it succeeds, and how to compare artifacts layer by layer rather than by image digest. virtualization
- Jan 26, 2026 Provenance Attestations and the Trust Boundary of a Package Install What an in-toto attestation binds together, how transparency logs change the meaning of a verified install, and which attacks remain outside the model. language runtimes
- Feb 22, 2025 Artifact Provenance from Commit to Deployed Digest Signed attestations bind an artifact digest to the materials and builder that produced it. What the statement must contain, how it is verified, and which attacks it does not stop. devops
- Sep 5, 2024 The WebAuthn Ceremony and Origin Binding What the browser signs, what the relying party verifies, and why the challenge and the origin check are what make the credential resistant to relay and phishing. security
- Jan 19, 2024 Measured Boot and the Chain of Trust From Firmware to Kernel How each boot stage hashes the next into a TPM before executing it, why the measurements go into append-only PCRs, and what an attestation actually proves about a running system. operating systems
- Nov 13, 2023 Migrating Guests Whose Memory the Hypervisor Cannot Read Confidential computing encrypts guest memory under keys the hypervisor does not hold, which removes compression, zero-page detection, and inspection from the migration path and adds an attestation step at the destination. virtualization
- Sep 9, 2022 Provenance Attestations and the Digest They Must Bind An attestation is a signed claim about a build. Its value depends on a subject digest that names the exact artifact, a predicate that names the process, and a verifier policy. security