Promethix Trust Material

Promethix Trust / NuGet

NuGet Provenance

This area publishes public release provenance for Promethix NuGet packages. The canonical package source for Promethix.Framework.Ado is nuget.org.

Trust Model

Promethix.Framework.Ado is not currently author-signed with a Promethix X.509 certificate. Public consumers should instead rely on nuget.org repository signing, GitHub Actions artifact attestations, published SHA-256 checksums, and package release artifacts published with the source repository.

Public consumers do not need to trust a Promethix internal CA for this package. Provenance is provided through GitHub attestations and published checksums instead.

Published Packages

Verification

Get-FileHash .\Promethix.Framework.Ado.2.1.0.nupkg -Algorithm SHA256

Package-specific instructions and canonical provenance links are available from each package page.