* Integrating with zot's built-in trust extension * Implementing verification through OCI registry APIs * Leveraging zot's GraphQL signature verification queries