The Update Framework (TUF)
This is the page you're already on — the Human View toggle above shows it in full.
A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.
The record
This is what the machine sees: the exact JSON-LD an agent receives for this listing.
WebSite
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#website",
"@type": "WebSite",
"name": "Decision Insights",
"potentialAction": {
"@type": "SearchAction",
"target": {
"@type": "EntryPoint",
"urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
}
},
"publisher": {
"@id": "https://decisioninsights.ai/#organization"
},
"url": "https://decisioninsights.ai"
}
Organization
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#organization",
"@type": "Organization",
"contactPoint": {
"@type": "ContactPoint",
"contactType": "customer support",
"email": "[email protected]"
},
"description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
"logo": {
"@type": "ImageObject",
"url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
},
"name": "Decision Insights",
"parentOrganization": {
"@type": "Organization",
"name": "Wiretap Labs",
"sameAs": [
"https://www.linkedin.com/company/wiretap-labs",
"https://www.crunchbase.com/organization/wiretap-labs"
],
"url": "https://wiretaplabs.com"
},
"publishingPrinciples": "https://decisioninsights.ai/standards/",
"sameAs": [
"https://www.linkedin.com/company/decisioninsights"
],
"url": "https://decisioninsights.ai"
}
BreadcrumbList
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"item": "https://decisioninsights.ai",
"name": "Decision Insights",
"position": 1
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/registry/",
"name": "Registry",
"position": 2
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/projects/",
"name": "Projects",
"position": 3
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/registry/linux-foundation/",
"name": "The Linux Foundation",
"position": 4
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/",
"name": "Cloud Native Computing Foundation (CNCF)",
"position": 5
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/projects/the-update-framework-tuf-knf411/",
"name": "The Update Framework (TUF)",
"position": 6
}
]
}
SoftwareSourceCode
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/projects/the-update-framework-tuf-knf411/#project",
"@type": "SoftwareSourceCode",
"additionalProperty": [
{
"@type": "PropertyValue",
"name": "Related projects",
"propertyID": "https://decisioninsights.ai/ns#relatedProjects",
"value": [
{
"@id": "https://decisioninsights.ai/projects/the-update-framework-tuf/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/the-update-framework-tuf/",
"name": "The Update Framework (TUF)"
},
{
"@id": "https://decisioninsights.ai/projects/in-toto/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/in-toto/",
"name": "In-Toto"
},
{
"@id": "https://decisioninsights.ai/projects/open-source-security-foundation/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/open-source-security-foundation/",
"name": "Open Source Security Foundation"
},
{
"@id": "https://decisioninsights.ai/projects/opentofu/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/opentofu/",
"name": "OpenTofu"
}
]
},
{
"@type": "PropertyValue",
"name": "Related organizations",
"propertyID": "https://decisioninsights.ai/ns#relatedOrganizations",
"value": [
{
"@id": "https://decisioninsights.ai/registry/synopsys/black-duck-software/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/synopsys/black-duck-software/",
"name": "Black Duck Software"
},
{
"@id": "https://decisioninsights.ai/registry/scribe-security/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/scribe-security/",
"name": "Scribe Security"
},
{
"@id": "https://decisioninsights.ai/registry/adolus/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/adolus/",
"name": "aDolus"
},
{
"@id": "https://decisioninsights.ai/registry/anchore/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/anchore/",
"name": "Anchore"
},
{
"@id": "https://decisioninsights.ai/registry/backslash-security/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/backslash-security/",
"name": "Backslash Security"
},
{
"@id": "https://decisioninsights.ai/registry/chainguard/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/chainguard/",
"name": "Chainguard"
},
{
"@id": "https://decisioninsights.ai/registry/cycode/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/cycode/",
"name": "Cycode"
},
{
"@id": "https://decisioninsights.ai/registry/endor-labs/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/endor-labs/",
"name": "Endor Labs"
}
]
}
],
"author": {
"@id": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/",
"name": "Cloud Native Computing Foundation (CNCF)"
},
"dateModified": "2026-08-27T03:10:32Z",
"description": "The Update Framework (TUF) is a framework and specification for securing software update systems and software supply chains.",
"keywords": [
"Open Source",
"Metadata",
"Software",
"Supply Chain"
],
"knowsAbout": [
{
"@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
"name": "Cybersecurity"
},
{
"@id": "https://decisioninsights.ai/term/sd-storage/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/sd-storage/",
"name": "Storage"
},
{
"@id": "https://decisioninsights.ai/term/metadata/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/metadata/",
"name": "Metadata"
},
{
"@id": "https://decisioninsights.ai/term/software/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/software/",
"name": "Software"
},
{
"@id": "https://decisioninsights.ai/term/supply-chain/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain/",
"name": "Supply Chain"
}
],
"mainEntityOfPage": "https://decisioninsights.ai/projects/the-update-framework-tuf-knf411/",
"maintainer": {
"@id": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/",
"name": "Cloud Native Computing Foundation (CNCF)"
},
"name": "The Update Framework (TUF)",
"publisher": {
"@id": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/",
"name": "Cloud Native Computing Foundation (CNCF)"
},
"url": "https://theupdateframework.github.io/"
}
What we add
Topic graph
A wire service tags a release with a category, once. It doesn't maintain a durable graph over time. We connect them to a topic graph an agent can query.
Cybersecurity https://decisioninsights.ai/term/cybersecurity/
Storage https://decisioninsights.ai/term/sd-storage/
Metadata https://decisioninsights.ai/term/metadata/
and 2 more
Counted facts
A protocol or open source project keeps no vendor list and publishes no figures of its own to check this against. This counts how it actually shows up across the graph -- articles that name it, the organizations named alongside it in those articles, similar projects, and organizations whose topic tags overlap with its own -- computed, not curated.
Related projects The Update Framework (TUF), In-Toto, Open Source Security Foundation, OpenTofu
Related organizations Black Duck Software, Scribe Security, aDolus, Anchore, Backslash Security, Chainguard, Cycode, Endor Labs