enum AssetProvenanceCertStatus {
  """
  The credential's signature validated against a signer on the trust list.
  """
  TRUSTED

  """
  The file's content or claim hash binding failed validation - the file was altered after signing.
  """
  TAMPERED

  """
  The signature is self-consistent but trust could not be confirmed: an unrecognized signer, or a certificate that aged out without a trusted timestamp.
  """
  NOT_TRUSTED
}