Prevot — verifiable receipts for firmware CVE reproduction (in-toto + Sigstore/Rekor) - View it on GitHub