We've named the package [io.intoto](https://github.com/sigstore/protobuf-specs/blob/main/protos/envelope.proto#L17), but the envelope described in the package matches a DSSE envelope, not an in-toto statement. This seems to be from [upstream](https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto#L3), so I'll follow up there as well to know if there's interest in making this change.
