A trillion-dollar grant, for a browser-verifiable code-integrity scheme called WEBCAT, plus Chromium support and an ERC standard.
2 comments
How is WEBCAT different from just shipping signed bundles or SRI, is the browser checking a stronger property than hash matching here?
SRI only pins fetched bytes; WEBCAT sounds like browser-side attestation for the whole bundle graph, not one hash.