SLSA, SBOMs, vulnerability scanning, and reproducible builds.
UAR ships source-bound local SLSA provenance, CycloneDX/SPDX SBOMs, and keyless