Kettle builds and verifies attested builds, packages that include cryptographically signed SLSA provenance.