Tangentially:

> [The RSL is] implemented in gittuf using a custom git namespace. The RSL is stored under refs/gittuf/reference-state-log and the policy metadata is stored under refs/gittuf/policy.

I'm glad to see more systems making use of git ref namespaces, which I think is an underused aspect of git for extending it. Other examples include git-notes [1], and Gerrit's various uses, such as user-facing push points, where the virtual ref "refs/for/branchname" receives commits for review that are destined for branchname, "refs/changes" for storing review data, and NoteDB [2] for storing project and user configuration.

[1] https://git-scm.com/docs/git-notes

[2] https://gerrit-review.googlesource.com/Documentation/note-db...