SLSA

Supply-chain Levels for Software Artifacts — the build-provenance framework. deputyOS targets SLSA L3 attestations as a deferred milestone; the generator is in place, third-party verification is the next step. See Security → Update trust chain.