In this milestone we will provide a basic Rust library for the verification of distribution artifacts. This will be the first reference implementation of a distribution-agnostic UAPI specification for the generic verification of distribution artifacts. In this initial milestone for this topic we will focus on the simple verification of package files, repository metadata and installation media, without a PGPKI (aka “Web of Trust”).