feat: enforce signed target maturity evidence

2026-08-02 03:41:09 +02:00
parent be8ba10ae3
commit 2c56a0fc11
12 changed files with 1245 additions and 15 deletions
@@ -208,7 +208,9 @@ The first Campaign-centric capability and infrastructure fit assessment is in
 `docs/CAPABILITY_AND_INFRASTRUCTURE_FIT.md`. Its rerun tooling can collect and
 verify a bounded installed composition; target, provider and production claims
 remain separate, expiring attestations signed by independently scoped proof
-authorities.
+authorities. The operational issuance, target-run, recovery-measurement, key
+custody, and promotion-gate procedure is in
+[Target Maturity Evidence Runbook](docs/TARGET_MATURITY_EVIDENCE_RUNBOOK.md).

 # GovOPlaN Docker