Oasis Community

Thanks, that helps. Those articles cover the remote-attestation and reproducible-build foundations well. The remaining point I would be interested in from engineering is whether one evidence package can bind the exact model artifact, policy hash and input provenance, so an auditor can reconstruct why a specific output was accepted.