TY - RPRT TI - Why Software Signing (Still) Matters: Trust Boundaries in the Software Supply Chain AU - Kelechi G. Kalu AU - James C. Davis PY - 2025 UR - https://arxiv.org/abs/2510.04964 ID - 2510.04964 ER -