Pushing

oxy push sends your changes, one seal over all of them, and a signed attestation moving the bookmark. The hub checks both against the repository's trust policy.