Ch 6: Attestation Generation

[absol27]

What does witness trace , what does a files being 'touched' mean(accessed vs read), how do we handle delegated and containerized builds.

[Uk-jake]

Can I contribute to this section? I think this is a part where I can contribute. For more detail on File trace and Network trace, it would be great if @stupendoussuperpowers and @Vyom-Yadav could help fill those in. In the meantime, I can start by drafting the initial outline and high level structure based on what I know.

I'm thinking of writing this part like these structures. Please let me know what you think.

• 6.1 Overview: A brief introduction to Witness and how attestations are generated using it.
• 6.2 File Trace Evidence: Explanation of what it means for a file to be touched.
• 6.3 Network Trace Evidence: Details on what network activity is recorded.
• 6.4 Workflow: Guidance on how to actually use the Witness commands(I'm not sure how detailed this section should be).

[stupendoussuperpowers]

You can get started on this. Assigned you to this issue as well.