Whilst the trust model is not perfect and a reputation based model with signed audits would represent an improvement I welcome this as progress in preventing su

Whilst the trust model is not perfect and a reputation based model with signed audits would represent an improvement I welcome this as progress in preventing supply-chain attacks. A worthwhile effort in my opinion.