Supply Chain

This demo starts with a simple procurement question: can we prove who signed this artifact and what evidence was accepted at the time? Proofnet takes software-signing evidence, such as Sigstore or Rekor-style release data, and content authenticity evidence, such as C2PA manifests, then normalizes that state into one proof packet. The artifact stays outside the demo. We keep the digest, signer identity, log or manifest reference, and the Proofnet binding. The reviewer sees that Proofnet does not replace existing provenance systems. It preserves the accepted claim as durable, post-quantum evidence that can be replayed later.