in-toto gives a framework to shield the integrity from the program source chain. It does so by verifying that every job inside the chain is carried out as prepared, by licensed staff only, and which the product is not really tampered with in transit. Rule arguments specified as permit for U