How do we fight malicious or accidental behavior?
Mitigating stolen credentials/malicious releases
- Witness labels and age policies
Artifact trust
- CAR verification of the manifest/version records
- Encourage the inclusion and use of checksums in artifact fragments
- DID reputation—is this individual trustworthy?
Accidental releases
- Committed to the firehose—AppViews decide what they want their policies to be (do we allow deleting or not?)