# Rivox Technical Glossary
- **CAS (Content-Addressed Storage)**: File blob storage indexed by SHA-256 content digests rather than file paths.
- **DAG (Directed Acyclic Graph)**: A directed graph with no cycles, modeling execution order dependencies.
- **in-toto**: A supply-chain attestation framework for recording step execution metadata (`.link` statements).
- **REAPI (Remote Execution API)**: The gRPC protocol standardized by Bazel for remote execution and remote caching.
- **Sigstore / Rekor**: Keyless identity signing and public transparency log infrastructure for supply-chain integrity.
- **SLSA (Supply-chain Levels for Software Artifacts)**: Security framework defining software supply-chain integrity levels.
- **SPDX**: An open standard format (ISO/IEC 5962:2021) for Software Bill of Materials (SBOM).
See also: [architecture.md](architecture.md), [security.md](security.md).