AIMCIS-PRVN — Provenance & Lineage Integrity
Ensures every action, transformation, and state change is cryptographically recorded, traceable, and verifiable.
Scope
The Provenance & Lineage Integrity domain covers the complete chain of custody for all AI-generated content, decisions, and actions — from origin through every transformation to final consumption.
Core Requirements by Assurance Level
| Requirement | AL0 | AL1 | AL2 | AL3 |
|---|---|---|---|---|
| Provenance chain format | R0 (optional) | R0→R1 minimum verified | Full chain with auditor seal | Full chain + cross-domain linking |
| Signature algorithm | Ed25519 (any implementation) | Ed25519 (verified) | Ed25519 + AAA verification | Ed25519 + HSM-backed signing |
| Hash chain integrity | Optional | Required for AL1 domains | Required for all certified content | Real-time streaming verification |
| Audit trail completeness | Self-declared | Automated check | AAA manual review | Full portfolio audit + annual recertification |
Certification Test Cases
- Chain Construction: Entity generates a provenance chain for sample content and demonstrates correct hash chaining.
- Signature Verification: Verify all Ed25519 signatures in the chain against resolved agent DIDs.
- Gap Detection: Introduce a gap in the chain and verify that the verification pipeline detects it.
- Cross-Domain Linking: Demonstrate provenance linkage across two or more AIMCIS domains.
Related domains: PRVN supports all other domains. Every domain profile requires a minimum R0→R1 provenance chain at AL1+.