{
  "code": "PROV-01",
  "slug": "non-authenticating-provenance-envelope",
  "title": "Non-Authenticating Provenance Envelope",
  "category": "Evidence and Provenance",
  "status": "Current",
  "version": "2.0.4-wip",
  "summary": "Records file-based workflow ancestry and declared local role labels without claiming human identity or approval.",
  "keywords": [
    "provenance",
    "parent artifact",
    "workflow action",
    "authenticity limitation"
  ],
  "mission_phases": [
    "Plan",
    "Validate",
    "Deliver",
    "Debrief"
  ],
  "canonical": "https://iarpg.com/standard/non-authenticating-provenance-envelope",
  "json": "https://iarpg.com/records/non-authenticating-provenance-envelope.json",
  "requirements": [
    {
      "level": "MUST",
      "text": "Each envelope record artifact digest, parent artifacts, workflow action, tool build, UTC time, reason code, standards, and preserved extensions."
    },
    {
      "level": "MUST",
      "text": "Declared role labels remain local workflow labels and never be presented as authenticated identity."
    },
    {
      "level": "MUST",
      "text": "Publication views show the authenticity limitation beside the provenance chain."
    },
    {
      "level": "SHOULD",
      "text": "A structured list accompany every visual provenance graph."
    }
  ],
  "research": [
    {
      "label": "Immutable records and UTC telemetry",
      "href": "/docs/report/monetary-architecture-genesis-allowance-and-economic-stabilization#ledger-schema-and-telemetry",
      "note": "Supports immutable records, reversals, and UTC event time."
    },
    {
      "label": "Evidence-based review and jurisdiction",
      "href": "/docs/report/justice-system-and-warrant-escalation-for-rogue-intelligence#recommended-warrant-architecture",
      "note": "Supports explainable evidence thresholds and reviewable decisions."
    }
  ],
  "related": [
    "portable-integrity-bundle",
    "append-only-review-ledger"
  ],
  "roles": [
    "Operative",
    "Handler",
    "Intelligence Analyst",
    "Technical Operator",
    "Counterintelligence Officer",
    "Liaison Officer",
    "Logistics Specialist",
    "Source Handler"
  ],
  "interaction_types": [
    "Review",
    "Validate",
    "Record",
    "Export",
    "Recover"
  ],
  "authority_types": [
    "Civil administration",
    "Military command",
    "Commercial intelligence service",
    "International verification body",
    "Scientific or infrastructure consortium",
    "Independent investigative network"
  ],
  "collection_disciplines": [],
  "conformance_level": "Level D — Simulatable",
  "implementation_maturity": "Published WIP",
  "release": "IARPG-OPS-2",
  "revised_utc": "2026-07-20T12:04:07Z",
  "purpose": "Records file-based workflow ancestry and declared local role labels without claiming human identity or approval.",
  "rationale": "Portable intelligence-operation artifacts require inspectable boundaries, deterministic evidence, explicit recovery, and no silent loss or identity overclaim.",
  "game_interaction": [
    "Inspect artifact",
    "Compare evidence",
    "Record reason code",
    "Export local result"
  ],
  "inputs": [
    "Browser-local artifact",
    "Applicable standard",
    "Declared source context"
  ],
  "outputs": [
    "Reviewable result",
    "Reason code",
    "Local export",
    "Preserved original"
  ],
  "state_transitions": [
    {
      "from": "received",
      "event": "requirement evaluated",
      "to": "accepted, quarantined, or rejected-with-source-untouched"
    }
  ],
  "evidence_and_provenance": [
    "Record source artifact ID, canonical digest, UTC event time, responsible local role label, and reason code.",
    "Do not convert a digest, label, or generated statement into an identity or authoritative fact claim."
  ],
  "ui_requirements": [
    "Show the record code and requirement level at the point of use.",
    "Expose the reason for pass, fail, quarantine, recovery, or rejection.",
    "Provide direct links to canonical human and machine records."
  ],
  "accessibility_requirements": [
    "Essential information is available without reliance on color, audio, motion, or a graph alone.",
    "Keyboard, screen-reader, reduced-motion, high-zoom, mobile, and print equivalents are documented."
  ],
  "telemetry_events": [
    {
      "name": "standard.non-authenticating-provenance-envelope.evaluated",
      "required_fields": [
        "event_id",
        "timestamp_utc",
        "artifact_id",
        "record_code",
        "result",
        "reason_code"
      ]
    }
  ],
  "abuse_and_exploit_cases": [
    "A participant attempts to remove unknown data during import or migration.",
    "A digest or declared label is presented as proof of human identity or approval.",
    "A consequential record is overwritten without a reason or preserved original."
  ],
  "failure_behavior": "Fail closed for irreversible publication or overwrite. Preserve original content, show the failing requirement, and allow export or non-destructive recovery.",
  "recovery_behavior": "Retain the original artifact and review event, clone any repaired draft, and require a new explicit validation event before continuing.",
  "example_implementation": "The local tool evaluates PROV-01, writes a UTC reason-coded result, and exposes both original and resulting artifacts for export.",
  "evidence_requirement": "Reviewable provenance and deterministic local evidence required",
  "related_examples": [
    "port-access-anomaly-investigation"
  ],
  "revision_history": [
    {
      "version": "2.0.4-wip",
      "date_utc": "2026-07-20T12:04:07Z",
      "note": "Initial PROV-01 publication for IARPG-OPS-2 release-candidate hardening."
    }
  ]
}