schema-version: 0.1.0
standard:
  schema-version: 0.1.0
  sequence: 240
  standard_id: REL-004
  title: Approved Producers
  summary: Official OSERA signed artifacts are produced only by producers approved
    for the targeted standards pack.
  doc-status: Draft
  standard-version: 0.1.0
  candidate-pack: OSERA-SP-0.1.0 candidate
  ratified-in: Not ratified
  ratified-date: Not ratified
  fitness-role: Required check
  type: REL
  category: Release Process
  applies-to:
  - OSERA maintainers
  - Patch providers
  - Repository operators
  requirements:
  - id: REL-004.REQ-001
    level: MUST
    text: Official OSERA signed artifacts must identify a producer that appears in
      the approved-producer registry for the targeted standards pack.
    checkability: automated
    checks:
    - id: REL-004.CHECK-001
      title: Producer is approved for the targeted standards pack
      type: publication-gate
      severity: blocking
      implementation: osera-fitness.rel004.approved_producer
      evidence:
      - producer_identity
      - approved_producer_registry
  - id: REL-004.REQ-002
    level: MUST
    text: The producer identity used at publication time must be recorded in the fitness
      result and release evidence.
    checkability: partially-automated
    checks:
    - id: REL-004.CHECK-002
      title: Producer identity is recorded in release evidence
      type: release-evidence
      severity: blocking
      implementation: osera-fitness.rel004.producer_identity_evidence
      evidence:
      - producer_identity
      - fitness_result
      - release_evidence
  source_path: docs/_standards/rel-004-approved-producers.md
  url: "/standards/rel-004-approved-producers/"