Attestation

A signed claim about an artefact, made by whoever performed the check, and verifiable later by anyone. It generalises signing from 'this is ours' to 'this passed the things we require', and it is what makes a policy like 'only run images that have been scanned and approved' enforceable at admission. The chain is only as good as who is trusted to make each claim, so the identities issuing attestations become part of your threat model.