Is this a function of UCP? Solution: enforces the deployment of signed images to the cluster

UCP is a control plane for cluster management, and while it integrates with DTR, the specific enforcement of signed images resides within the registry's content trust features, not UCP itself.

UCP manages the orchestration and deployment of containers, but the enforcement of signed images (Docker Content Trust) is a feature typically provided by Docker Trusted Registry (DTR). DTR integrates with Docker Content Trust to ensure that only cryptographically signed and verified images can be pulled and deployed, a capability distinct from UCP's core functions.