MCPF is intended to outlive any single vendor. The community decides the standard, the repo structure, and the release cadence.
Prefer small, reviewable changes; preserve backward compatibility; document everything; and keep releases predictable.
Start with a problem statement: what breaks without trust? what policy must an enterprise enforce? what should be revocable?
Registries only matter when used in production. Share patterns: internal allowlists, regulated industries, partner federation, audits.