Creating a new contract

Assumptions

For demonstration purposes, the BusyBox workload is used to create and verify the contract.

Procedure

The contract creation process requires coordinated actions from the Solution Provider, Data Owner, and Auditor, each contributing essential elements for security, integrity, and operational compliance throughout the contract lifecycle.

You can create a contract that contains core policy using Rego and includes a contract signature for integrity verification or add features like attestation encryption, cosign-verified container images, or sealed secrets.

To create a contract, you must perform the following steps: