Public communication that is generated or assisted must be labelled, and the label must survive a citizen forwarding it. Procurement needs the source, the DPA and a named data location before anything is signed.
Two jobs at once: sign your own output so it can be trusted downstream, and verify incoming material fast enough that the desk does not route around you.
Small communication teams, many channels, no platform engineers. The watch folder and the panel cover the whole workflow without an integration project.
Utilities, health and defence-adjacent bodies where the network cannot reach a public endpoint at all. Trust lists arrive as signed bundles on your terms.
Each of these is a document, not a paragraph. The deployment pack contains all of them, plus a reference architecture for the three models above.
Trust & Security detail