Skip to content

Conversation

@ralphbean
Copy link

@ralphbean ralphbean commented Dec 17, 2025

Changes the default signature filename from model.sig to claims.jsonl to align with OMS format conventions where claims.jsonl is the standard filename for bundled attestations from #587.

Changes

  • Updated CLI default from model.sig to claims.jsonl
  • Updated all documentation examples to use the new default
  • Default can still be overridden using the --signature CLI option

Related to #587

@ralphbean ralphbean requested review from a team as code owners December 17, 2025 22:18
This aligns with the OMS format conventions where claims.jsonl is the
standard filename for bundled attestations.

The default can still be overridden using the --signature CLI option.

Assisted-by: Claude Sonnet 4.5 <[email protected]>
Signed-off-by: Ralph Bean <[email protected]>
Updated all examples in README.md, docs/demo.ipynb, and
docs/model_signing_format.md to reflect the new default signature
filename.

Assisted-by: Claude Sonnet 4.5 <[email protected]>
Signed-off-by: Ralph Bean <[email protected]>
Copy link
Collaborator

@mihaimaruseac mihaimaruseac left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think that for a period we should support both model.sig (with just the signature) and claims.jsonl (which can contain anything).


More important though, I think we should signal in README and everywhere else that claims.jsonl is appended to (#592 is a step in that direction, but verification should still iterate over all claims to find which one can be verified rather than just the last?)

I'll look more over these over the break / in the new year.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants