https://www.tdcommons.org/dpubs_series/11391/
"Tamper-Evident, Non-Downgradeable Binding of Advisory Header Metadata " by David Lee Brown
An encrypted-document envelope carries advisory metadata — a threshold/quorum requirement, a lifetime policy, a distribution policy, and a lineage pointer —...
tamper evidentdavid leenondowngradeablebinding