> checking everything possible and completely locking you out if anything is even slightly off is the security theater Sadly not the first or last time that te

> checking everything possible and completely locking you out if anything is even slightly off is the security theater Sadly not the first or last time that technology is wielded imprecisely or carelessly. Improvement options include: 1. Marketing and rewarding non-theatrical attestation 2. Open training content for attestation best practices. 3. Symmetrical 2-way attestation of open components. 4. Automated CI/CD detection of over-broad attestation. 5. IETF or other advocacy to improve attestation protocols. 6. Legal/regulatory mechanisms. There's an attestation track at OC3 in 2 days, online and in Berlin, https://www.oc3.dev/speakers-and-talks https://www.oc3.dev/speakers-and-talks