Layered, DANE/TLSA-inspired trust model for CI supply-chain (GitHub Actions) pinning: trust-anchor + provenance/key + leaf-exact layers, vs flat recursive SHA-pinning.
-
Updated
Sep 21, 2026 - Just
Layered, DANE/TLSA-inspired trust model for CI supply-chain (GitHub Actions) pinning: trust-anchor + provenance/key + leaf-exact layers, vs flat recursive SHA-pinning.
Manifesto and reference materials for the Campaign for Cooler Coding and Programming — ethical foundations for code work.
GitHub Action that validates .deed manifests against the normative DEED grammar. Formerly a2ml-validate-action.
Normative constraint set-points for the DEED/K9 ecosystem (Mustfile, Intentfile, Adjustfile, Bustfile, Dustfile)
An envelope-first language discipline: every safety claim explicit, scoped, inspectable, and mechanically accountable.
To associate your repository with the provable-governance topic, visit your repo's landing page and select "manage topics."