@misc{indiciaeae8ce00b4a82, title = {Sign Here: Attributing a Source for a More Trustworthy Software Supply Chain}, author = {Derek Garcia}, year = {2026}, url = {https://arxiv.org/abs/2610.28794}, note = {Source identifier: 2610.28794} }