docs: record caller_attribution ownership and defer the attestation design #124

Merged

clawdie merged 1 commit from docs/attribution-ownership-contract into main 2026-10-06 21:36:55 +02:00

Conversation 0 Commits 1 Files changed 2 +26

clawdie commented 2026-10-06 21:36:55 +02:00

Owner

Copy link

Make the current contract explicit now and push everything cryptographic into a named, deferred design. No code, no new field, no runtime change.

Changes

• docs/plans/JEV-DECISION-GATE.md §7.1 (new): caller_attribution is self-declared provenance metadata produced by the invoking Jev client — not authentication, authorization, a cryptographic signature, or operator approval. Colibri owns the policy contract for any future verified identity/attestation field; none is introduced here and no runtime implementation is implied. Jev output, confidence, and rationale never grant or raise authority, cross-referenced to §9's no-authority invariant.
• docs/wiki/credentials.md: the identity-metadata section states the same for caller_attribution and points at §7.

Deliberately not done

• No agent-skills change. It already produces caller_attribution, validates its format, and documents that it is not a cryptographic signature.
• No new field name. attested_identity stays a candidate only; naming standards §5 require operator consolidation before a new public name.
• No signer, key ownership, algorithm, or key-management decision — all deferred to the attestation design.

Ownership (split)

Layer	Owner
Produce the self-declared caller_attribution	agent-skills
Policy/provenance contract and future evidence interpretation	Colibri
Signer, key, algorithm, verification mechanics	future attestation design

Verification

./scripts/ci-checks.sh — All checks passed.

Follow-up: this closes colibri#94 once merged, with the deferred attestation work tracked separately.

Make the current contract explicit now and push everything cryptographic into a named, deferred design. **No code, no new field, no runtime change.** ## Changes - **`docs/plans/JEV-DECISION-GATE.md` §7.1 (new):** `caller_attribution` is self-declared provenance metadata produced by the invoking Jev client — not authentication, authorization, a cryptographic signature, or operator approval. Colibri owns the policy contract for any future verified identity/attestation field; none is introduced here and no runtime implementation is implied. Jev output, confidence, and rationale never grant or raise authority, cross-referenced to §9's no-authority invariant. - **`docs/wiki/credentials.md`:** the identity-metadata section states the same for `caller_attribution` and points at §7. ## Deliberately not done - **No agent-skills change.** It already produces `caller_attribution`, validates its format, and documents that it is not a cryptographic signature. - **No new field name.** `attested_identity` stays a candidate only; naming standards §5 require operator consolidation before a new public name. - **No signer, key ownership, algorithm, or key-management decision** — all deferred to the attestation design. ## Ownership (split) | Layer | Owner | | --- | --- | | Produce the self-declared `caller_attribution` | agent-skills | | Policy/provenance contract and future evidence interpretation | Colibri | | Signer, key, algorithm, verification mechanics | future attestation design | ## Verification `./scripts/ci-checks.sh` — **All checks passed.** Follow-up: this closes colibri#94 once merged, with the deferred attestation work tracked separately.

clawdie added 1 commit 2026-10-06 21:36:55 +02:00

docs: record caller_attribution ownership and defer the attestation design ... 54ae1267d8

Make the current contract explicit and push everything cryptographic into a
named, deferred design. No code, no new field, no runtime change.

- JEV-DECISION-GATE.md §7.1 (new): caller_attribution is self-declared
  provenance metadata produced by the invoking Jev client — not authentication,
  authorization, a signature, or approval. Colibri owns the policy contract for
  any future verified identity/attestation field; none is introduced here and no
  runtime implementation is implied. Jev output never grants or raises
  authority, cross-referenced to §9.
- credentials.md: the identity-metadata section states the same for
  caller_attribution and points at §7.

Deliberately deferred: the field name, the trusted principal, the signer, key
ownership, signing direction, the algorithm, and key management.

Gates: ./scripts/ci-checks.sh — All checks passed.

clawdie merged commit b7e74ba6fd into main 2026-10-06 21:36:55 +02:00

clawdie referenced this pull request from a commit 2026-10-06 21:36:57 +02:00

Merge pull request 'docs: record caller_attribution ownership and defer the attestation design' (#124) from docs/attribution-ownership-contract into main

clawdie referenced this pull request 2026-10-06 21:37:04 +02:00

Jev caller_attribution: stamp ownership and signing #94

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawdie/colibri!124

No description provided.