---
reference_key: slsa
title: "SLSA Supply-chain Levels for Software Artifacts v1.0"
url: "https://slsa.dev/spec/v1.0/"
availability: available
capture_method: primary
captured_at: 2026-06-23T03:30:26Z
document_id: REF-slsa
---

# SLSA Supply-chain Levels for Software Artifacts v1.0

| Field | Value |
|-------|-------|
| **Reference key** | `slsa` |
| **Availability** | AVAILABLE |
| **Capture method** | `primary` |
| **Source type** | remote_url |
| **URL / path** | https://slsa.dev/spec/v1.0/ |
| **Captured (UTC)** | 2026-06-23T03:30:26Z |
| **Content type** | text/html; charset=UTF-8 |
| **HTTP status** | 200 |

## Boardroom Citation Context

MVAP P3-05 supply-chain build integrity; L3 deferred v1.3.

## Source Location

https://slsa.dev/spec/v1.0/





## Captured Content

```text
SLSA  SLSA specification Home Current activities SLSA Specification 1.0 Understanding SLSA What's new in v1.0 About SLSA Supply chain threats Use cases Guiding principles FAQ Future directions Core specification Terminology Security levels Producing artifacts Distributing provenance Verifying artifacts Verifying build platforms Threats & mitigations Attestation formats General model Provenance Verification Summary How to SLSA For developers For organizations For infrastructure providers Specification stages Community Blog Single-page view lastPos ? window.scrollY >= $refs.navbar.offsetHeight : window.scrollY > 0; hidden = fixed && window.scrollY > lastPos; if (window.scrollY > $refs.navbar.offsetHeight && !scrolledPast) { setTimeout(() => $refs.navbar.classList.add('is-scrolled-past'), 500); scrolledPast = true; } else if (window.scrollY === 0) { $refs.navbar.classList.remove('is-scrolled-past'); scrolledPast = false; } lastPos = window.scrollY; " x-bind:class="{ 'is-fixed': fixed, 'is-hidden': hidden, 'menu-open': navOpen }" >  Version 1.2 is the current version. See the Version 1.2 documentation . SLSA specification Status: Retired On this page SLSA is a specification for describing and incrementally improving supply chain security, established by industry consensus. It is organized into a series of levels that describe increasing security guarantees. This is version 1.0 of the SLSA specification, which defines the SLSA levels and recommended attestation formats, including provenance.  Current activities What's new in v1.0  SLSA is a cross-industry collaboration.  2026 The Linux Foundation, under the terms of the Community Specification License 1.0 Privacy statement We use GoatCounter to help us improve our website by collecting and reporting information on how it's used. We do not store advertising or tracking cookies. The information we collect does not identify anyone and does not track an individual's use of the site. View source on GitHub This site is powered by Netlify
```

---

*Archived reference article for AICSR-STUDY-2026-001 footnote corpus.*