Add slsa-build-provenance-artifact-signing-supply-chain article

Author: webstackdev

.vscode/settings.json

@@ -13,14 +13,17 @@
     "alives",
     "alpn",
     "amondnet",
+    "anchore",
     "anonymization",
     "appns",
     "Asana",
     "asyncio",
     "asyncpg",
     "azurekv",
+    "backdoored",
     "bento",
     "bezier",
+    "Birsan's",
     "bitnami",
     "Bridgy",
     "bsky",
@@ -40,6 +43,7 @@
     "Conduktor",
     "Consolas",
     "criticals",
+    "crossenv",
     "CUDA",
     "cyclonedx",
     "dall",
@@ -76,11 +80,13 @@
     "fosstodon",
     "FOUC",
     "fprintf",
+    "Fulcio",
     "gantt",
     "gclid",
     "gemoji",
     "getattr",
     "glidejs",
+    "GOARCH",
     "Gobreaker",
     "gomodule",
     "gotk",
@@ -217,6 +223,7 @@
     "referer",
     "registrator",
     "Rego",
+    "Rekor",
     "repost",
     "reposts",
     "RGAA",

COVERS.md

@@ -1342,3 +1342,25 @@ Minimalist illustration of a signal strength indicator (like WiFi bars) rendered
 ### Prompt 5: Control Room Dashboard
 
 Photograph or render of a modern operations control room with multiple screens displaying graphs, gauges, and status indicators. Blue ambient lighting with screens providing main illumination. Wide angle showing the scale of monitoring. The sense of comprehensive visibility into system health.
+
+## slsa-build-provenance-artifact-signing-supply-chain
+
+### Prompt 1: Chain Links with Digital Overlay
+
+Close-up photograph of heavy industrial chain links with a digital holographic overlay showing code signatures and checksums. Blue-green digital glow on metallic surfaces. Dark background with dramatic lighting. The fusion of physical security metaphor with digital verification.
+
+### Prompt 2: Wax Seal on Digital Document
+
+Artistic render of a traditional red wax seal stamped on a digital document or code file. The seal shows cryptographic symbols instead of traditional heraldry. Blend of antique and modern aesthetics. Parchment texture transitioning to pixel grid.
+
+### Prompt 3: Factory Assembly Line with QR Codes
+
+Photograph of a modern manufacturing assembly line where each product has a visible QR code or digital tag being scanned. Clean, well-lit industrial environment. The concept of provenance and tracking through production.
+
+### Prompt 4: Fingerprint on Circuit Board
+
+Macro photograph of a human fingerprint pattern overlaid on or etched into a circuit board surface. Green PCB with copper traces. The fingerprint as metaphor for unique identity and verification.
+
+### Prompt 5: Notary Stamp and Keyboard
+
+Photograph of a traditional notary public embosser/stamp next to a modern keyboard or laptop. Documents with both physical embossed seals and printed cryptographic hashes. The evolution of attestation from physical to digital.

_TODO.md

@@ -261,16 +261,23 @@ Complex Text and Instruction Following: The model demonstrates an enhanced under
 
 These are the services I specialize in and offer as package deals.
 
-There are two pricing variants: part-time stream and full-time stream. How to handle a part-time stream effectively since it might be hard to find two to bundle together? Maybe full time gets a weekend day of on-call and daytime hours, part-time gets evening hours?
+There are four pricing variants:
+- part-time stream out of hours evening weekdays
+- full-time stream in hours weekdays
+- on call rotation
+- ad-hoc projects on time available
+
+Ad hoc:
 
 - Backstage implementation. How to do this so I'm delivering platforms, not portals? What's the scope - pipeline design, etc.?
 - Refactoring legacy code bases, "lift and shifts"
 
+On-call rates:
+
+$2500 onboarding + $500 just for being on call for the week + hours paid for actually being called : 150% hourly rate on week nights or 200% hourly rate on weekends/holidays, for each call I received (1 call = 1 hour paid, even if I worked 10minutes on the problem). RCAs (root cause analysis) done after calls, to identify the underlying issue.
+
 ## Content
 
-service-decommissioning-scream-test-shutdown
-slo-error-budget-practical-guide
-slsa-build-provenance-artifact-signing-supply-chain
 strangler-fig-migration-observability-traffic-shifting
 strangler-fig-monolith-auth-extraction-migration
 structured-logging-correlation-ids-log-schema-design