Reports

Signed provenance attestations for audit and client hand-off

New report

Every report is signed against the commits it covers and can be verified later

Report history

Signed reports stay verifiable after the code changes