Commits on Aug 1, 2024

1. Add in-toto format as hash of shard hashes …

   This converts model serialization manifests that record every model file
   shard hash into an in-toto payload that can then be passed to Sigstore's
   `sign_intoto` for signing to generate a Sigstore `Bundle` (if using
   Sigstore).
   
   To identify the models, we compute a hash of all hashes of the file
   shards and use that as the subject. The individual file hashes are used
   as the payload and we would have the verifier check them as part of the
   verification process.
   
   Signed-off-by: Mihai Maruseac <mihaimaruseac@google.com>

   

   mihaimaruseac committed Aug 1, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for fa08711
   • Browse repository at this point

   Copy the full SHA

   fa08711 View commit details

   Browse the repository at this point in the history