Planned activities:

• Tool that signs and verifies, compatible with ssh-keygen -Y sign and supports ssh-agent
• Tool that logs a signed checksum, outputs a sigsum proof (inclusion proof, cosigned tree head, ...)
• Tool that verifies a sigsum proof for some data
• Tool that produces a sigsum-token (EDIT: 2023-01-10)
• Sigsum proof format
• Sigsum policy format (used when logging and verifying)
• Associated documentation on how to use the above tools

For some discussion that lead to the above, see: sigsum/core/sigsum-go#6 (closed)

XXX: close this milestone 14-16 feb regardless of its current state, then define a new one that reflects where we're at.