[immibis]

And the in-detail explanation is full of references to specific third-party services, like Fulcio and SigStore...