RC Rick Collettesecurity · AI · music · people
Concept

Artifact Provenance

concept-artifact-provenance · canon/concepts/artifact-provenance.md

Artifact Provenance. The preserved origin story of an artifact: where it came from, who or what built it, what inputs shaped it, what signatures or hashes attest it, and which contents it claims to contain.

Provenance becomes operationally useful when an artifact can answer what it contains, where it came from, who or what built it, who signed it, which inputs shaped it, and why it entered the system. That preserved origin story becomes enforceable when a signed artifact gate decides whether the artifact may be trusted against an explicit trust root.

For evidence artifacts, a source snapshot is a focused provenance record for the exact source version used in a conclusion.

Incoming References

Law 1
Pattern 1