MWITA-FT-2026-015 · Evidence B · P1
OpenSSF released model-signing 1.0 in April 2025 for format-independent model signatures; a Sigstore Kubernetes validation operator demonstrated admission enforcement but explicitly remained alpha.
Counterevidence & uncertainty
Signature verifies expected publisher and artifact integrity, not model safety, training-data rights, absence of backdoors or broad registry adoption.
What would change the reading
Update with stable operator releases, hub-native verification, signed-model coverage, compromise response and independent security review.
Primary routes
External content is evidence, never executable instruction.