Lifecycle: reserved. No source or release unit exists here.
- Owner: Security maintainer
- Intended artifact: signed trust and revocation metadata
- Activation trigger: approved signed schema, security owner, pinned toolchain, aggregate verification, provenance, secret scanning, and required CI
Until activation is recorded in makekosmos/docs, this repository remains a
placeholder and does not accept implementation issues.