Framework Spec

Provenance

Context-aware identity verification with cryptographic proof, temporal momentum, and risk overlays.

Last updated Mar 6, 2026

Layer: Agent (certification layer)
Scale: 0-100 with Certified / Conditional / Uncertified
Production Tier: Transaction-Grade

Purpose

Provenance determines whether an agent identity can be trusted for operational use. It consolidates identity, deployment, and control evidence into a single confidence-bearing trust signal before certification and onboarding decisions.

How It Works

1Identity registration intake
2Collect evidence artifacts
3Provenance evaluation
4Certification policy decision
5Continuous monitoring and recertification triggers

Emits

score (0-100)confidence (0-1)bandevidence gaps

Scoring Dimensions

1. Deployment Verification

Verifies that the deployed agent matches registered identity and ownership claims.

2. Capability Attestation

Assesses evidence that declared capabilities are independently validated.

3. Version Integrity

Checks release lineage, change control, and integrity continuity across versions.

4. Behavioral History

Evaluates stability and consistency of observed behavior over time.

5. Transparency Coverage

Measures explainability and auditability depth for decisions and actions.

Public note: exact formulas, weighting logic, and calibration constants are intentionally withheld.

Input Schema

FieldTypeRequiredDescription
entity_idstringyesStable agent identifier.
ownerstringyesResponsible team or principal.
deployment_attestationsobject[]yesDeployment and control attestations.
capability_attestationsobject[]noCapability validation artifacts.
version_metadataobjectyesRelease/version lineage and integrity data.
behavior_summaryobjectnoHistorical behavioral evidence summary.
transparency_artifactsobject[]noLogs, traces, and explainability records.
context_profilestringnoEvaluation context profile.

Output Schema

FieldTypeDescription
frameworkstringprovenance
versionstringScoring specification version.
entity_idstringEvaluated entity identifier.
scorenumberProvenance score from 0 to 100.
bandstringcertified, conditional, or uncertified.
confidencenumberConfidence in score quality (0 to 1).
context_profilestringProfile used for evaluation.
momentum_statestringDirection of trust movement (improving/stable/degrading).
evidence_gapsstring[]Missing or weak evidence areas.

Score Interpretation

Provenance Tiering Bar

Certification posture by score range for onboarding decisions.

80-100

Certified

Interpretation: Identity evidence is strong and operationally reliable.

Typical action: Permit standard production use.

50-79

Conditional

Interpretation: Identity is usable but with notable evidence or control gaps.

Typical action: Restrict scope and require remediation.

0-49

Uncertified

Interpretation: Identity trust is insufficient for safe production reliance.

Typical action: Block or sandbox until evidence improves.

Worked Example

Scenario: a platform must onboard three external agents for production workflows.

AgentDeploy Verif.Capability Attest.Version IntegrityBehavioral HistoryTransparencyScoreBandDecision
Agent AHighHighHighMediumHigh86CertifiedApprove
Agent BHighMediumMediumMediumLow64ConditionalApprove with restrictions
Agent CLowLowMediumLowLow38UncertifiedBlock pending remediation

Operational outcome:

  1. Agent A receives full production access.
  2. Agent B is limited to lower-risk scopes until evidence is improved.
  3. Agent C is held from production onboarding.

Illustrative note: values and scores above are example outputs for documentation only.

Use Cases

Enterprise Agent Onboarding

Certify internal and vendor agents before production access. Reduce identity ambiguity and ensure minimum evidence quality across teams.

Regulated Financial and Insurance Operations

Verify agent identity and control lineage for high-impact workflows. Apply conditional certification when required controls are partially met.

Public Sector and Defense Procurement

Evaluate third-party autonomous systems with a standardized trust contract. Preserve auditable certification records for oversight and review.

Marketplace and Partner Ecosystems

Establish a common trust gate across heterogeneous agents and providers. Improve interoperability through consistent certification outcomes.