asraa

https://docs.google.com/document/d/1rhJEPs2LiCs7CZvZeNf8BIM2NLBjXAot8v-GnfulyQg/edit?resourcekey=0-PqzLxKb99V2ZM0iljWsWEA# Here it is! I have started working out the implementation just to make sure it works, but my main goal is not to keep adding flags and commands to...

@dlorenc @joshuagl @bobcallaway do you have any feedback on this? I'd like to get this done in the next week so I can test run v3

Adding here with more feedback: we could and should have config validators.

cc @kommendorkapten

> that allows sigstore to create namespaced delegations to Fulcio identities so that users can determine which identities should be used to verify particular signatures. Cool, thank you! Could you...

@kommendorkapten I think this is the last critical orchestration item needed - I'll take care of it right now.

> AIUI the previousRoot isn't intended to replace the need to lookup the previous policy in Rekor, it's basically just another bit of information that's available at policy edit-time that...

One other thing: we should probably make this policy format re-useable -- say you generate it offline and want to upload it, or you are given it out of band...

The linked issue #645 also describes how to encode short tensors - I suspect this will be handled by layout assignments / packing techniques to determine padding and replication strategies....

Also one more note: we can add the pub/priv key generation to the context generation function (https://github.com/google/heir/pull/696#discussion_r1636688307), if we remove the restriction to return only one value. Maybe something like:...