@misc{indiciaeb6c247aa52ed, title = {Why Software Signing (Still) Matters: Trust Boundaries in the Software Supply Chain}, author = {Kelechi G. Kalu and James C. Davis}, year = {2025}, url = {https://arxiv.org/abs/2510.04964}, note = {Source identifier: 2510.04964} }