diff --git a/sigstore/_cli.py b/sigstore/_cli.py
index 61d7da0c..52cf35df 100644
--- a/sigstore/_cli.py
+++ b/sigstore/_cli.py
@@ -33,7 +33,12 @@
 
 from sigstore import __version__, dsse
 from sigstore._internal.fulcio.client import ExpiredCertificate
-from sigstore._internal.predicate import (
+from sigstore._internal.rekor import _hashedrekord_from_parts
+from sigstore._internal.rekor.client import RekorClient
+from sigstore._internal.trust import ClientTrustConfig
+from sigstore._utils import sha256_digest
+from sigstore.dsse import StatementBuilder, Subject
+from sigstore.dsse._predicate import (
     PREDICATE_TYPES_CLI_MAP,
     Predicate,
     PREDICATE_TYPE_SLSA_v0_2,
@@ -41,11 +46,6 @@
     SLSAPredicateV0_2,
     SLSAPredicateV1_0,
 )
-from sigstore._internal.rekor import _hashedrekord_from_parts
-from sigstore._internal.rekor.client import RekorClient
-from sigstore._internal.trust import ClientTrustConfig
-from sigstore._utils import sha256_digest
-from sigstore.dsse import StatementBuilder, Subject
 from sigstore.errors import Error, VerificationError
 from sigstore.hashes import Hashed
 from sigstore.models import Bundle, InvalidBundle
diff --git a/sigstore/dsse.py b/sigstore/dsse/__init__.py
similarity index 100%
rename from sigstore/dsse.py
rename to sigstore/dsse/__init__.py
diff --git a/sigstore/_internal/predicate.py b/sigstore/dsse/_predicate.py
similarity index 100%
rename from sigstore/_internal/predicate.py
rename to sigstore/dsse/_predicate.py