When it fits
- A product publishes deployable container images.
Proposed guarantees
These describe the intended contract. Consult implementation and verification evidence before relying on them.
- Verified digest returned only after required checks
What stays outside
- Universal builder or deployer
Failure modes
- Published image mistaken for approved image
- Mutable tag substitution
Existing alternatives
Sigstore Cosign
Use established signing tooling; specify promotion gates.
Implementations
No AMSL implementation is recorded in this snapshot. External alternatives above are not claims of AMSL adoption.
Evidence and verification
Candidate selection includes restricted, maintainer-reported evidence. It is not independently reproducible here, and no private source details are published.
No executed verification or real consumer adoption is recorded in this snapshot.
Open questions
- Define scan failure and provenance verification behavior.