docs: Federation via ActivityPub: S2C2F Notes: Add ING-4 mirror sourc…

…e code analogy for trust attestations Signed-off-by: John Andersen <[email protected]>
scitt-community · Oct 18, 2023 · 6acc66d · 6acc66d
1 parent 9c54f9c
commit 6acc66d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/docs/federation_activitypub.md b/docs/federation_activitypub.md
@@ -87,6 +87,12 @@ By the end of this tutorial you will have four terminals open.
 - One for submitting claims to Bob and Alice's SCITT instances and querying
   their ActivityPub Actors.
 
+### S2C2F Notes
+
+- ING-4: Mirror a copy of all OSS source code to an internal location
+  - One might also want to mirror trust attestations, integrity data, etc. to
+    ensure Availability. SCITT instances federation could assist with
+    keeping mirrors as up to date as possible.
 
 ### Bring up the ActivityPub Server