Samir Kakkar

@yizha1 - Should we also call out the need for oras-go dependency in this? Also, do you want to mention the process to follow for releasing the notation-go and notation-go-core...

Can we defer the CLI experience for configuring Trust store and Trust policy in a subsequent release. for the first release users can add /remove certificates in the director structure...

Can the "List" and "Inspect" commands be combined into one?

So is the proposal to keep the public key in the repository/registry? But how does the consumer of the image know which is the original repository where the image publisher...

> Per some feedback, I'd like to see something implemented such as a `--dry-run` switch on `notation sign` which returns back information about what is going to be signed. This...

as discussed in the meeting on 9/19 - "-e" option should stay for RC-1. "-t" option can be removed for the RC-1 - Lets remove "notation cache".. , if "cache"...

My personal suggestion will be to leave the specification as is and make it an implementation decision. I think of signature or artifact expiry as a "best if used by"...

> > @iamsamirzon @SteveLasker @FeynmanZhou @yizha1 I propose we close roadmap issues like this one and these below since the roadmap repo should be covering this. This notaryproject repo can...

@SteveLasker , @dtzar - This issue should be in Notation, not in notary project, and I believe we have multiple open issues there to track the UX for configuration of...

@dtzar - I was thinking we can use one of the "user story" items you recently created or this one https://github.com/notaryproject/notation/issues/225. We can talk more tomorrow with some live color...