Your question is Software Supply Chain Integrity. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
How would you ensure the integrity of a software supply chain when deploying updates to remote hardware?
Discuss the controls from source commit through build, signing, transport, installation, and runtime verification. Address compromised build dependencies, signing-key loss, interrupted connectivity, rollback protection, fleet observability, and incident response. Explain how you would prove that each control works, using concrete technologies and threat-modeling terminology.
