There's https://www.sigstore.dev/ https://www.sigstore.dev/ - but looks like the focus is on containers mostly (rather than eg refusing to load/exec an untruste

There's https://www.sigstore.dev/ https://www.sigstore.dev/ - but looks like the focus is on containers mostly (rather than eg refusing to load/exec an untrusted dll or binary). See also some related discussion here: https://lwn.net/Articles/733431/ https://lwn.net/Articles/733431/