in-toto is a framework to protect supply chain integrity.

new-york-university secure-systems-lab security supply-chain