CTI TAC Meeting Notes 2025-06-25

​CTI TAC Meeting Notes 2025-06-25

Present:
   * Carlos O'Donell
   * David Edelsohn
   * Kris Borchers (OpenSSF)
   * Josepy Myers
   * Siddhesh Poyarekar

Agenda:
  * [codonell] Slow progress this month as I have focused on GNU Tools Cauldron 2025,
    but I'm handing that off to the OC to run, so it shouldn't take any more of my
    time once ticketing is up.
  * [codonell] Steps taken since last meeting:
   * Siddhesh responded to Sam James about funding.
   * Sam James still had questions about CTI governance model.
   * Carlos got the CTI ADP docs from Kris to review and prep for governance post.
  * [codonell] Thank you Kris for the updated CTI ADP docs.
  * [codonell] I still need to post direct questions about Sourceware progress.
  * [codonell] I want to review the CTI ADP docs and respond in a clean thread about governance.
   * We have existing answers to governance questions that we prepared before.
   * The key piece is that this is just a service offering we walk away from if it doesn't meet our requirements.
  * [codonell] The open question I have is: Can we post the ADP doc publicly?
  * [david] Charter Exhibit B can be published.
  * [codonell] I can recreate it from text.
  * [codonell] Note: Paul Eggert pointed out some papers that NIST SP-800 218 is not perfect.
   * [codonell] I do plan to review those papers.
Next steps:
   * Carlos to post direct questions to current Sourceware progress.
   * Carlos to post direct position on governance for infrastructure.
   * Carlos to update the CTI website with current progress, plus CTI Charter.
   * Sid to still review OpenSSF best practices badge gold and silver for hardware requirements.

-- 
Cheers,
Carlos.