Image provenance, dependency pinning, artifact signing, registry policy
11.1 Current State and Scope As-built supply-chain posture is minimal but deliberately clean so f...
