Tamper-Evident Certificates for API Governance

I have been working my way through the governance tools I am building under API Commons one day at a time, and today’s is the one I keep coming back to when I think about what governance is actually for. Most of the tooling in this space faces the producer — it helps the team that publishes an API check their own work. API Certification faces the other direction.