Making the Internet more secure one signed container at a time (security.googleblog.com)

So maybe I’m a little lost, but how does this differ from content trust beyond being for more than docker?

Also — can the signature be uploaded to any registry or does that registry need to include a notary?