== Attendees == * Shane Coughlan * Hiro Fukuchi * Justin Cappos * Yoshi Kobayashi * Jim Hutchinson * Nobuo Imada * Nathan Kumagai * Mark Gisi * Santiago Torres Arias * Kate Stewart * Endo San == Project Update == * Fujitsu has been announced as the latest Platinum Member. * We had a great workshop at the Leadership Summit on March 13th: * tl;dr: OpenChain is going to ISO - Mark Gisi is finalizing the ISO spec (2.0) * Our new conformance web app is now live in English and Japanese: https://certification.openchainproject.org/ * OpenChain will co-host an event in Shenzhen on March 22nd. == Case Study: In-Toto == In-Toto - a New York University Project * Over to our guest speaker, Justin Cappos * What is In-Toto? * How can In-Toto support OpenChain Conformance? * in-toto is a general technique for software supply chain enforcement * Cryptographic verification, tamper resistant, provenance, repudiation * Used in many large software companies * We are particularly interested in adding license compliance checking * Try out in-toto! https://in-toto.io Slides here: https://www.slideshare.net/ShaneCoughlan3/intoto-openchain-presentation-03182019 == Onboarding Work Team == * Finalizing the Path to Conformance, a document that will become a page on the website. * This document is nearly ready and will be featured front and center on the website: https://docs.google.com/document/d/1ySsqu-XoivV5FrNQOEVdpgfI7Q_ltrkBrD ncayMoy4o/edit We will go live with the first version of this page for *FRIDAY* at the 22nd March Asian Legal Network workshop in Shenzhen. If possible please cast your eye over the document before then. == Specification Work Team == * The latest draft of the next version of OpenChain Specification can be found here: https://wiki.linuxfoundation.org/_media/openchain/openchainspec-2.0.draft.p df * A marked up version can be found here: https://wiki.linuxfoundation.org/_media/openchain/OpenChainSpec-2.0.draft. MarkUp.pdf * Recent updates can be found in yellow and blue highlights. Remaining Steps: * Continue to discuss recently received feedback and work through remaining outstanding issues listed on the spec’s github account: https://github.com/OpenChain-Project/Specification/issues * The wider public comments stage has commenced and will concluded on March 22nd * The draft freeze period will begin on March 23rd == Conclusion == * The project is moving well towards both greater ease of supply chain adoption and formal standardization. * The next couple of weeks will see some key services and documents released. * The most important deadline is that comments on the Specification update close on *22nd March*