The trust manifest is a sensitive data model that requires security analysis.

• threat model
• ability to map to existing registries
• validation of MUST/SHOULD/MAY on manifest's fields.