Wiki

• Shane Coughlan
• Hiro Fukuchi
• Justin Cappos
• Yoshi Kobayashi
• Jim Hutchinson
• Nobuo Imada
• Nathan Kumagai
• Mark Gisi
• Santiago Torres Arias
• Kate Stewart
• Endo San

• Fujitsu has been announced as the latest Platinum Member.
• We had a great workshop at the Leadership Summit on March 13th:
• tl;dr: OpenChain is going to ISO - Mark Gisi is finalizing the ISO spec (2.0)
• Our new conformance web app is now live in English and Japanese:

https://certification.openchainproject.org/

• OpenChain will co-host an event in Shenzhen on March 22nd.

In-Toto - a New York University Project

• Over to our guest speaker, Justin Cappos
• What is In-Toto?
• How can In-Toto support OpenChain Conformance?

• in-toto is a general technique for software supply chain enforcement
• Cryptographic verification, tamper resistant, provenance, repudiation
• Used in many large software companies
• We are particularly interested in adding license compliance checking
• Try out in-toto! https://in-toto.io

Slides here: https://www.slideshare.net/ShaneCoughlan3/intoto-openchain-presentation-03182019

• Finalizing the Path to Conformance, a document that will become a page on the website.
• This document is nearly ready and will be featured front and center on the website:

https://docs.google.com/document/d/1ySsqu-XoivV5FrNQOEVdpgfI7Q_ltrkBrD ncayMoy4o/edit

We will go live with the first version of this page for *FRIDAY* at the 22nd March Asian Legal Network workshop in Shenzhen. If possible please cast your eye over the document before then.

• The latest draft of the next version of OpenChain Specification can be found here:

https://wiki.linuxfoundation.org/_media/openchain/openchainspec-2.0.draft.p df

• A marked up version can be found here: https://wiki.linuxfoundation.org/_media/openchain/OpenChainSpec-2.0.draft. MarkUp.pdf
• Recent updates can be found in yellow and blue highlights.

Remaining Steps:

• Continue to discuss recently received feedback and work through remaining outstanding issues listed on the spec’s github account: https://github.com/OpenChain-Project/Specification/issues
• The wider public comments stage has commenced and will concluded on March 22nd
• The draft freeze period will begin on March 23rd

• The project is moving well towards both greater ease of supply chain adoption and formal standardization.
• The next couple of weeks will see some key services and documents released.
• The most important deadline is that comments on the Specification update close on *22nd March*