- Predicates:
in-toto Provenance (DSSE-wrapped) with claims for bundle inputs, normalization pipeline version, tenant scope, and content hashes; optional Rekor transparency pointer when online. - Artefacts covered: Evidence Bundle v1 payloads (observations, linksets, normalization diffs) and mirror bundle manifest hash when present.
- Tenancy: tenant-id is lowercased, required, and included in subject, claims, and DSSE
_type to keep air-gap parity. - Transparency: if Rekor unavailable (air-gap), include
transparency.skip_reason = offline and signed local timeline anchor.
subject.digest (sha256 of bundle tar) and subject.name (bundle_id).bundle.created (UTC RFC3339) and bundle.version (semantic).pipeline.version (build ID or git SHA) and pipeline.inputs (hashes of observation/linkset payloads).tenant (lowercase) and scope (advisory | vex | policy | mixed).evidence_bundle (path/doi) and transparency (rekor UUID or skip reason).aoc.guardrails (boolean) and aoc.details (list of enforced checks).
{
"subject": {"name": "evidence-bundle-m0", "digest": "sha256:REPLACE"},
"bundle": {"id": "evidence-bundle-m0", "version": "1.0.0", "created": "2025-11-19T00:00:00Z"},
"pipeline": {"version": "git:abcd1234", "inputs": ["sha256:payload-hash-1", "sha256:payload-hash-2"]},
"tenant": "demo",
"scope": "vex",
"evidence_bundle": "out/evidence/bundles/evidence-bundle-m0.tar.gz",
"transparency": {"rekor_uuid": null, "skip_reason": "offline"},
"aoc": {"guardrails": true, "details": ["schema:frozen:1.0", "limits:chunk:max=2000"]}
}
- File:
docs/modules/evidence-locker/attestation-scope-note.md (this document). - Reference in Evidence Bundle changelog and sprint
Execution Log when updated.
- Swap placeholder digest values with real bundle hash after MIRROR-CRT-56-001 emits artefact.
- Attach this note to Concelier/Excititor attestation tasks (CONCELIER-ATTEST-73-001/002, EXCITITOR-ATTEST-73-001/002).
