Arnaud J Le Hors

I sure hope a PR is simple enough! On the other hand I don't know whether it would be easier to add a data file than adding to some kind...

No problem. Thanks for support it in the new version.

@AevaOnline The charter is now available in plain text on the website at the following address: https://openssf.org/about/charter/ So I think you can close this PR and simply link to that.

> I think we're getting hung up on the challenges of X.509 tooling, which is a bit in the weeds. It might be worth zooming out and considering that, more...

To add to my point above: practically speaking there is no way to undo what's already been done so making it possible to have the provenance data in the envelop...

Thanks @laurentsimon. I'd be interested. I'm usually good at playing the guinea pig if nothing else. :-)

Hi, I'm not totally sure where the discussion for this takes place. I added a few comments to the google doc.

I'd be happy to help add IBM's logo. :-)

> This would also solve the problem of next/previous links not crossing the spec/provenance/verification_summary boundary, as mentioned by @olivekl in [#832 (comment)](https://github.com/slsa-framework/slsa/pull/832#issuecomment-1505971000). I think that's right.

Thanks for giving me a chance to chime in on this @denyeart . I agree with the overall gist of this but rather than having the new gateway samples be...