// GLOSSARY

Attestation (Evidence Claim)

Signing and verifying build and CI pipeline outputs (model artefact, data-provenance chain, dependencies) and recording evidence claims in a structured form. The point is not that a file exists but the portable, verifiable proof of where it came from, which process it passed through and who approved it. What software supply-chain attacks (such as SolarWinds and XZ Utils) make plain is this: the legitimacy of an artefact reaching production must rest on evidence, not on a trust assumption about its source. The release decision (promote/rollback) is tied to this evidence ground; without the claim the decision has nothing to stand on. Sigstore, Cosign, in-toto and the SLSA framework are the established field forms of this chain; attestation is the signed, machine-verifiable form of provenance.