@techreport{slsa2026,
  author = {{SLSA Community}},
  title = {SLSA Specification v1.2: Provenance and Build Provenance},
  institution = {Linux Foundation / Community Specification},
  year = {2026}
}

@misc{nistsbom,
  author = {{National Institute of Standards and Technology}},
  title = {Software Security in Supply Chains: Software Bill of Materials (SBOM)}
}

@techreport{spdx3,
  author = {{SPDX Project}},
  title = {SPDX Specification 3.x},
  institution = {Linux Foundation},
  year = {2024}
}

@techreport{c2pa2026,
  author = {{Coalition for Content Provenance and Authenticity}},
  title = {C2PA Technical Specification v2.4},
  year = {2026}
}

@techreport{w3cprov2013,
  author = {Lebo, Timothy and Sahoo, Satya and McGuinness, Deborah and others},
  title = {PROV-O: The PROV Ontology},
  institution = {World Wide Web Consortium},
  year = {2013},
  type = {W3C Recommendation}
}