OCI 1.1 and the subject field that finally made referrers click
OCI 1.0 made it painful to attach signatures and SBOMs to an existing image. The 1.1 subject field and referrers API quietly fix that, and implementing it taught me things the spec does not say out loud.