%% You should probably cite draft-ietf-scitt-architecture-22 instead of this revision. @techreport{ietf-scitt-architecture-21, number = {draft-ietf-scitt-architecture-21}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-scitt-architecture/21/}, author = {Henk Birkholz and Antoine Delignat-Lavaud and Cedric Fournet and Yogesh Deshpande and Steve Lasker}, title = {{An Architecture for Trustworthy and Transparent Digital Supply Chains}}, pagetotal = 41, year = 2025, month = sep, day = 30, abstract = {Traceability in supply chains is a growing security concern. While verifiable data structures have addressed specific issues, such as equivocation over digital certificates, they lack a universal architecture for all supply chains. This document defines such an architecture for single-issuer signed statement transparency. It ensures extensibility, interoperability between different transparency services, and compliance with various auditing procedures and regulatory requirements.}, }