Refuse a model that cannot prove where it came from
one move: verify before loading
Open the code pane immediately, then use the Spec tab, optional design question, tests, and artifact when you want them.
Finish each move before carrying the artifact forward.
A model artifact needs provenance: digest, source, license, datasets, signer, and verification status before deployment.
Deliverable: State the system invariant in one sentence.Create and verify a manifest digest against an approved signature and required provenance fields.
Deliverable: Type the deterministic core.Tampering, missing provenance, expired signatures, and unapproved signers must fail closed.
Deliverable: Record a normal case and a boundary case.Change one byte, signer, dataset, or expiry and inspect the exact rejection reason.
Deliverable: Name the failure signal and its guard.A signed model card, provenance manifest, and verification transcript.
Deliverable: Save the contract, evidence, and handoff note.Tampering, missing provenance, expired signatures, and unapproved signers must fail closed.
Change one byte, signer, dataset, or expiry and inspect the exact rejection reason.
A signed model card, provenance manifest, and verification transcript.
Deriva-authored extension beyond the supplied PDF. The five moves are Deriva’s implementation contract for this project.