<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://attested-delivery.github.io/docs/</loc></url><url><loc>https://attested-delivery.github.io/docs/adrs/0001-attestation-preserving-digest-promotion/</loc></url><url><loc>https://attested-delivery.github.io/docs/adrs/0002-declare-slsa-build-level-3/</loc></url><url><loc>https://attested-delivery.github.io/docs/adrs/0003-sbom-format-cyclonedx-spdx-oci-referrers/</loc></url><url><loc>https://attested-delivery.github.io/docs/adrs/0004-admission-time-attestation-verification/</loc></url><url><loc>https://attested-delivery.github.io/docs/adrs/0005-ai-provenance-git-trailers/</loc></url><url><loc>https://attested-delivery.github.io/docs/adrs/0006-dora-instrumentation-deployment-definition/</loc></url><url><loc>https://attested-delivery.github.io/docs/adrs/0007-github-flow-artifact-promotion-branching-policy/</loc></url><url><loc>https://attested-delivery.github.io/docs/adrs/0008-syft-grype-pin-security-tooling-by-digest/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/01-the-digest-is-the-release/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/02-github-flow-over-git-flow/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/03-attestations-that-survive-promotion/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/04-enforce-at-admission-not-by-convention/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/05-slsa-l3-is-nearly-free/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/06-an-sbom-you-can-actually-use/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/07-supply-chain-hazards-2026/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/08-honest-dora-defining-deployment/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/09-ai-authorship-provenance/</loc></url><url><loc>https://attested-delivery.github.io/docs/concepts/10-observability-for-a-delivery-pipeline/</loc></url><url><loc>https://attested-delivery.github.io/docs/overview/</loc></url><url><loc>https://attested-delivery.github.io/docs/specifications/github-native-attested-quality-gates/</loc></url><url><loc>https://attested-delivery.github.io/docs/specifications/interface-contracts/</loc></url><url><loc>https://attested-delivery.github.io/docs/specifications/production-readiness-attestation-gates/</loc></url><url><loc>https://attested-delivery.github.io/docs/specifications/promotion-attestation-pipeline-spec/</loc></url><url><loc>https://attested-delivery.github.io/docs/specifications/research-report/</loc></url></urlset>