in-toto / in-toto/specification

Document "artifact rule" rationale

Open
#4 7 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
54
Forks
27
PR merge metrics
No merged PRs in 30d

Description

The [recent discussion](https://github.com/in-toto/docs/pull/2#discussion_r143289526) about whether and why we decided to replace the implicit `DISALLOW *` with an implicit `ALLOW *` when verifying expected materials and products makes it clear that we need to document these decisions more thoroughly.

in-toto/in-toto#43 shows how the current design of `MATCH` rules (only) evolved.

@SantiagoTorres suggests to create a Wiki that summarizes such on- and offline discussions and provides additional information about the rationale behind certain design decision that would go beyond the scope of the specification.

Contributor guide

No contributing guide indexed for this repository

Research direction

Read the linked discussion in docs/pull/2 and in-toto/in-toto#43 first to understand the artifact-rule decisions and the evolution of MATCH rules. Review the specification repository's existing documentation structure, then propose where the rationale belongs and document the agreed decisions, including the implicit ALLOW * behavior and related discussions.

Written by the indexing model from the issue text.

Assessment

Domain
documentation
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.